2842daf40e3666bf688feaa4b56c88c5635dc0f4816c8db186401e6cad3c67c6

Analysis

max time kernel
130s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
15/03/2024, 06:25

Target
2024-03-15_31e6e0259a6a83ef27f3c76d0e3042b0_virlock.exe
Size 109KB
Sample240315-g6n7msca22
SHA256 2842daf40e3666bf688feaa4b56c88c5635dc0f4816c8db186401e6cad3c67c6
MD5 31e6e0259a6a83ef27f3c76d0e3042b0
SHA1 1940c7a75e38fa34a9bffec0fb02afd7e4ae9997
SHA512 f8cec1bd98e5e5459207539378cdac583d6875936f1dc3e0494c9c3a0f248564747213cc080fe9fb511dc60f591583404c10b557f5af78ba8c257ecd9a76545d
SSDEEP 1536:7OP0hMgGjlIMVNO6IFx7e888w88c7BKgdtJi9CEyE4Prcbvf4UpOrDTc4NQTOv/N:7OP1gKlpVNO7FcC5BsP4y3IL/Wc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1056	3508	WerFault.exe	84

C:\Users\Admin\AppData\Local\Temp\2024-03-15_31e6e0259a6a83ef27f3c76d0e3042b0_virlock.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-15_31e6e0259a6a83ef27f3c76d0e3042b0_virlock.exe"
1⤵
PID:3508
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3508 -s 224
  2⤵
  - Program crash
  PID:1056

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 3508 -ip 3508
1⤵
PID:1996

memory/3508-0-0x0000000000400000-0x000000000041D000-memory.dmp

Download

memory/3508-1-0x0000000000400000-0x000000000041D000-memory.dmp

Download