Analysis
-
max time kernel
124s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
15/08/2023, 16:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fa8c7b34d473e602e3f9d4eee3f25e4d_virlock_JC.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
fa8c7b34d473e602e3f9d4eee3f25e4d_virlock_JC.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
fa8c7b34d473e602e3f9d4eee3f25e4d_virlock_JC.exe
-
Size
190KB
-
MD5
fa8c7b34d473e602e3f9d4eee3f25e4d
-
SHA1
6d8893db5158bb2d4c2b0a557b64d7d4eec57700
-
SHA256
ae77c09f85a0b4a94bb700d7a0077e0fd73ac81ed3a482ad5e8c026ee998f558
-
SHA512
e6e73f0ac78241f63f011199f3429f72854b94ed3d7a598328f6cab020e3554d600a53279f29be8d038fc26065904499acd9945776be80f34bfbcf4ab0184244
-
SSDEEP
3072:gxZHQxRYw0g7ARw3B8SRkWyuXrN3AZLX6yNqfDOiDDE+Kswsdr:aARL0gU+RPk3uyLqykSiDwmwsd
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3052 2396 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa8c7b34d473e602e3f9d4eee3f25e4d_virlock_JC.exe"C:\Users\Admin\AppData\Local\Temp\fa8c7b34d473e602e3f9d4eee3f25e4d_virlock_JC.exe"1⤵PID:2396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2396 -s 2242⤵
- Program crash
PID:3052
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2396 -ip 23961⤵PID:5080