0850e6a4979ead68981cd3f8b2106f17d0aae3004d9b8350edb3d7673c8fa358

Analysis

max time kernel
240s
max time network
249s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
07-01-2024 12:35

Target

48ff629f0f09c0d9043c6bfa14a29870.exe
Size

80KB
MD5

48ff629f0f09c0d9043c6bfa14a29870
SHA1

e4bf5cfbea9dec901c16be3132df7f23d1b45c52
SHA256

0850e6a4979ead68981cd3f8b2106f17d0aae3004d9b8350edb3d7673c8fa358
SHA512

42dac1c99e82d99fc7b261a1352fc068e2793bd04fa9ecab6880e73f85b407876df2bb1d1729a73a20def74761d1d081877faaad4e9d0d40e3f054cd63703850
SSDEEP

1536:EuFvaFOT2q9v/+QJzyhjG40ls1YkJfNaULJd33cBuSiijYvgpfMY6Wd3raC:5aU6q93+HhG5sJuULJpMBrV8gmC

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3476-0-0x0000000013150000-0x0000000013185000-memory.dmp	upx
behavioral2/memory/3476-1-0x0000000013150000-0x0000000013185000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1592	3476	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\48ff629f0f09c0d9043c6bfa14a29870.exe
"C:\Users\Admin\AppData\Local\Temp\48ff629f0f09c0d9043c6bfa14a29870.exe"
1⤵
PID:3476
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3476 -s 312
  2⤵
  - Program crash
  PID:1592

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3476 -ip 3476
1⤵
PID:676

memory/3476-0-0x0000000013150000-0x0000000013185000-memory.dmp

Filesize
212KB

Download
memory/3476-1-0x0000000013150000-0x0000000013185000-memory.dmp

Filesize
212KB

Download