bb61f8cb40a34f975e1bacd26d533e1e0f312fe138b0f93f607a8d1077ee6a5c

Analysis

max time kernel
148s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
16-03-2024 13:26

Target

SecuriteInfo.com.Win32.Trojan-Stealer.BlackMoon.D.19512.31326.exe
Size

228KB
MD5

39fcd811dbe670c3cd8ccaefb3227bc8
SHA1

3df2db5dda9d7c84b83a8b78c077297ccabe1b55
SHA256

bb61f8cb40a34f975e1bacd26d533e1e0f312fe138b0f93f607a8d1077ee6a5c
SHA512

54edd307f75523b3c451bc8c494f27123a0995cbfede075e3315c012714785b66949e1bcbbea0ec10de85f1985543d9a060f6a46ec407c4e9127946d380ab9b5
SSDEEP

1536:3Fv/oX6cIzWBkkxzsdljavTACv3XzTlYZ0M9dAx:3FXsizWBkQzsnjzoiZr9dAx

Score

3^/10

Program crash 2 IoCs

pid	pid_target	Process	procid_target
2040	4068	WerFault.exe	86
3656	4068	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Trojan-Stealer.BlackMoon.D.19512.31326.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win32.Trojan-Stealer.BlackMoon.D.19512.31326.exe"
1⤵
PID:4068
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4068 -s 228
  2⤵
  - Program crash
  PID:2040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4068 -s 228
  2⤵
  - Program crash
  PID:3656

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4068 -ip 4068
1⤵
PID:4220

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 4068 -ip 4068
1⤵
PID:4944