c43af7a2f2662f1deab59f4bada885a42eba21a8bb62347d23947850650bb74e

Analysis

max time kernel
138s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
04/08/2023, 16:16

Target
5e2df87b863d94f014e730e28a488a1f_virlock_JC.exe
Size 179KB
Sample230804-tq9vmade9s
SHA256 c43af7a2f2662f1deab59f4bada885a42eba21a8bb62347d23947850650bb74e
MD5 5e2df87b863d94f014e730e28a488a1f
SHA1 98b9dab304250037bcde9b8c016242e8b42be061
SHA512 795e485c4cf2eb39612e78bbda08be5b6d98fc41a635064d86bb082e929f30c82045389f13f688de6eecd291e5052696a50128302c2f616295c483c9af9fdc7f
SSDEEP 3072:MQd/g9i+Mt9lNIwD5pk0fdOifZhaewdg5d22k/H04b3FdxJYysvRIhBu6jFareBO:/MMt9owD5p9fBfn6G5d22k/H04b3Fdxb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1416	3512	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\5e2df87b863d94f014e730e28a488a1f_virlock_JC.exe
"C:\Users\Admin\AppData\Local\Temp\5e2df87b863d94f014e730e28a488a1f_virlock_JC.exe"
1⤵
PID:3512
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3512 -s 224
  2⤵
  - Program crash
  PID:1416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3512 -ip 3512
1⤵
PID:3060

memory/3512-133-0x0000000000400000-0x000000000042E000-memory.dmp

Download

memory/3512-134-0x0000000000400000-0x000000000042E000-memory.dmp

Download