e205b3e1b7a88fdaf2ac3130d6b71e7aab7dcdb93734b1ace018b2e94a1529c3

Analysis

max time kernel
121s
max time network
130s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19/03/2024, 12:20

Target

d618edd6fd5f143592a10cb90da2dbaa.exe
Size

488KB
MD5

d618edd6fd5f143592a10cb90da2dbaa
SHA1

722ade78f3dff03eb3e0bf905e8a908f01e094ef
SHA256

e205b3e1b7a88fdaf2ac3130d6b71e7aab7dcdb93734b1ace018b2e94a1529c3
SHA512

5d9bb0f02277e4dc3d319a80776fc14f521aadb546b35e1f6d0136ee4d11d5c080aba18e77a0590a9599c752c7f03fe3a3f5509f838a11c8225a7b6319874ba6
SSDEEP

12288:uL2bvOWhmYVRgykbQdjql4ISiZIN7Hs20U0bFLl:oIvOqvEykIGl4IS4INjVsNl

Score

7^/10

upx

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2360-0-0x0000000010000000-0x0000000010020000-memory.dmp	upx
behavioral1/memory/2360-2-0x0000000010000000-0x0000000010020000-memory.dmp	upx
behavioral1/memory/2360-3-0x0000000010000000-0x0000000010020000-memory.dmp	upx
behavioral1/memory/2360-4-0x0000000010000000-0x0000000010020000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2524	2360	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2524	2360	d618edd6fd5f143592a10cb90da2dbaa.exe	28
PID 2360 wrote to memory of 2524	2360	d618edd6fd5f143592a10cb90da2dbaa.exe	28
PID 2360 wrote to memory of 2524	2360	d618edd6fd5f143592a10cb90da2dbaa.exe	28
PID 2360 wrote to memory of 2524	2360	d618edd6fd5f143592a10cb90da2dbaa.exe	28

C:\Users\Admin\AppData\Local\Temp\d618edd6fd5f143592a10cb90da2dbaa.exe
"C:\Users\Admin\AppData\Local\Temp\d618edd6fd5f143592a10cb90da2dbaa.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2360 -s 116
  2⤵
  - Program crash
  PID:2524

memory/2360-0-0x0000000010000000-0x0000000010020000-memory.dmp

Filesize
128KB

Download
memory/2360-2-0x0000000010000000-0x0000000010020000-memory.dmp

Filesize
128KB

Download
memory/2360-3-0x0000000010000000-0x0000000010020000-memory.dmp

Filesize
128KB

Download
memory/2360-4-0x0000000010000000-0x0000000010020000-memory.dmp

Filesize
128KB

Download