b683f49cddede0df4f3bda36c0a2aa490ced9133af65d23759341ac26da42fa1

Analysis

max time kernel
132s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 02:13

Target

b683f49cddede0df4f3bda36c0a2aa490ced9133af65d23759341ac26da42fa1.exe
Size

77KB
MD5

858bb95d7affbfae6952ec694d1b1716
SHA1

147852151f6bdbe7519e0d06494cabeead09b656
SHA256

b683f49cddede0df4f3bda36c0a2aa490ced9133af65d23759341ac26da42fa1
SHA512

900b020a55a853d8efc48fcb08ca03f899434caea4a6ffe0a63655a2ceebcd154d8404edc559b54123943015daf4b6a7f898712e1079e140b68686f40d69d79d
SSDEEP

768:m0vdNL9vUupWcNa8Zz5iQlmxDuoKgPvkHVyXUw:m0vdNLtUuFNa8Zz5iQlmxCoKgXk1+

Score

9^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource	yara_rule
behavioral2/memory/3552-0-0x0000000000400000-0x0000000000492000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/3552-0-0x0000000000400000-0x0000000000492000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

900 3552 WerFault.exe b683f49cddede0df4f3bda36c0a2aa490ced9133af65d23759341ac26da42fa1.exe

pid	pid_target	process	target process
900	3552	WerFault.exe	b683f49cddede0df4f3bda36c0a2aa490ced9133af65d23759341ac26da42fa1.exe

C:\Users\Admin\AppData\Local\Temp\b683f49cddede0df4f3bda36c0a2aa490ced9133af65d23759341ac26da42fa1.exe
"C:\Users\Admin\AppData\Local\Temp\b683f49cddede0df4f3bda36c0a2aa490ced9133af65d23759341ac26da42fa1.exe"
1⤵
PID:3552

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3552 -s 212
2⤵
- Program crash
PID:900

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3552 -ip 3552
1⤵
PID:4436

memory/3552-0-0x0000000000400000-0x0000000000492000-memory.dmp

Filesize
584KB

Download