c89e13c43ef8dbcc2e3baa7810ca51bdad1a183a2d8a2dde8adbee2d7e31a97a

Analysis

max time kernel
137s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11/03/2024, 00:36

Target

c89e13c43ef8dbcc2e3baa7810ca51bdad1a183a2d8a2dde8adbee2d7e31a97a.exe
Size

468KB
MD5

e6d177fbd1b56cec2b01cba861337cad
SHA1

6842984757aca82f4c3c2a3f5816460c0af86751
SHA256

c89e13c43ef8dbcc2e3baa7810ca51bdad1a183a2d8a2dde8adbee2d7e31a97a
SHA512

df26e59dd283321046ade4f2c42b88e5be7f4ac70b4cff864d007045633e2f71508492cb62b771e3cbe64c4c3e38d246a0fc41f02f2ae50fe1d8383b793c0288
SSDEEP

12288:CSP9J3gHiuGbrIrgP2cnzRDQuk9RZ+mgtBD5zPuqjfsvYM:CeiHiRbcgPHzq9CmynzWqj4z

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3448-0-0x0000000000400000-0x0000000000580000-memory.dmp	upx
behavioral2/memory/3448-2-0x0000000000400000-0x0000000000580000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3908	3448	WerFault.exe	88

C:\Users\Admin\AppData\Local\Temp\c89e13c43ef8dbcc2e3baa7810ca51bdad1a183a2d8a2dde8adbee2d7e31a97a.exe
"C:\Users\Admin\AppData\Local\Temp\c89e13c43ef8dbcc2e3baa7810ca51bdad1a183a2d8a2dde8adbee2d7e31a97a.exe"
1⤵
PID:3448
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3448 -s 764
  2⤵
  - Program crash
  PID:3908

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 3448 -ip 3448
1⤵
PID:4432

memory/3448-0-0x0000000000400000-0x0000000000580000-memory.dmp

Filesize
1.5MB

Download
memory/3448-1-0x0000000000890000-0x0000000000891000-memory.dmp

Filesize
4KB

Download
memory/3448-2-0x0000000000400000-0x0000000000580000-memory.dmp

Filesize
1.5MB

Download