308ff11146ebe0103dfd8a1c3188b14f7c052cd683b74be6928815615cfd91ec

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
09-03-2024 21:35

Target

308ff11146ebe0103dfd8a1c3188b14f7c052cd683b74be6928815615cfd91ec.exe
Size

259KB
MD5

41b00f65912d399f11c0c8cae12e83ec
SHA1

6029b29c7c082531232146586ac40b523bb34ebd
SHA256

308ff11146ebe0103dfd8a1c3188b14f7c052cd683b74be6928815615cfd91ec
SHA512

c5fd14d239cfb606f465bc9a41563d01c0c2e5862d99be45dd1e4ab4ee5fde780a44e28f9885c07a8d1a176168dea51c4764e5918ec42aa5db42bcb3dcd7e303
SSDEEP

3072:3gV7qqpBXXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTB891gE:Q1blKgzelZNQSBQGH/CSpWqTVmQIH

Score

9^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
behavioral2/memory/1920-0-0x0000000000400000-0x0000000000443000-memory.dmp	INDICATOR_EXE_Packed_MPress

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4892	1920	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\308ff11146ebe0103dfd8a1c3188b14f7c052cd683b74be6928815615cfd91ec.exe
"C:\Users\Admin\AppData\Local\Temp\308ff11146ebe0103dfd8a1c3188b14f7c052cd683b74be6928815615cfd91ec.exe"
1⤵
PID:1920
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1920 -s 220
  2⤵
  - Program crash
  PID:4892

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1920 -ip 1920
1⤵
PID:3416

memory/1920-0-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download