46d9a3dddd7928702175c127431114ae59fd4e7c7f9362ad4cf109257817950a

Analysis

max time kernel
127s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
15/08/2023, 19:17

Target

03e116956c8f9db86c671870a6cde599_mafia_JC.exe
Size

840KB
MD5

03e116956c8f9db86c671870a6cde599
SHA1

7e597d7d2bf2fb5f5397615b8357b9b6736974bf
SHA256

46d9a3dddd7928702175c127431114ae59fd4e7c7f9362ad4cf109257817950a
SHA512

428362ecb929e82581d653bbb4ca57974b6179223092d3121db683d9fd546fe75852fe5a6cc07ff0d47a6df2b9ac423401f1cdfd3cc80883e5cff705ec25997b
SSDEEP

24576:YDDWfqlWNxed2eZLmIzDjLEIMkaBdJ4FWWvlWLggE9rEUMA:8WfqkaDjAIBavJ4FCknEFA

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1828	4772	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\03e116956c8f9db86c671870a6cde599_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\03e116956c8f9db86c671870a6cde599_mafia_JC.exe"
1⤵
PID:4772
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4772 -s 220
  2⤵
  - Program crash
  PID:1828

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4772 -ip 4772
1⤵
PID:748

memory/4772-135-0x0000000000380000-0x0000000000460060-memory.dmp

Filesize
896KB

Download
memory/4772-134-0x0000000000380000-0x0000000000460060-memory.dmp

Filesize
896KB

Download
memory/4772-136-0x0000000000380000-0x0000000000460060-memory.dmp

Filesize
896KB

Download
memory/4772-137-0x0000000000380000-0x0000000000460060-memory.dmp

Filesize
896KB

Download