Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
06/04/2024, 13:06
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-06_490137ae39206682f342fd3602e28908_teslacrypt.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-06_490137ae39206682f342fd3602e28908_teslacrypt.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-06_490137ae39206682f342fd3602e28908_teslacrypt.exe
-
Size
255KB
-
MD5
490137ae39206682f342fd3602e28908
-
SHA1
c9674107d202c142ee0f6a5e60ed1cd7aec0ad45
-
SHA256
611acfb1bb3e8d0f277c7fe21ccb2d0c026a2eead01e93c9d6ec01ec88eb116c
-
SHA512
90166d3f33d9b3b183c515f3cc5589ccd6a95bfdb375eee3bda52c7473e02a9e0ea8f1fee12fce1dc34c29fc926ff7147dff3f6ee7fcd673bb2cf93943e62470
-
SSDEEP
3072:tM8SYgJAvWsDL2ToQz75W7VgiLXOSrNrQwk8rDDAoSloh0JsmWXdFtzK20TRpAM:yJhipNrQqAsh0Jsm/2+XAM
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4736 4536 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-06_490137ae39206682f342fd3602e28908_teslacrypt.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-06_490137ae39206682f342fd3602e28908_teslacrypt.exe"1⤵PID:4536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4536 -s 5122⤵
- Program crash
PID:4736
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4536 -ip 45361⤵PID:4388