54b4c48f48952746f13e0f1061affb74c6b840c84dc758d77297e2322d276b58

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
15-05-2024 22:15

Target

2024-05-15_f6aa86e634766a16ca92614bd905fea9_bkransomware_icedid.exe
Size

1020KB
MD5

f6aa86e634766a16ca92614bd905fea9
SHA1

3c8ec566f9f2b86e6e5a520fbd81e0c77e7f887a
SHA256

54b4c48f48952746f13e0f1061affb74c6b840c84dc758d77297e2322d276b58
SHA512

28767849b201b5b7f6462d03f8062ba9261caed80282f3669231c215388bb91ad3c0535383255f7e17dbbe2c8f7952180be72a82b636bac3f372e1e7326b60f8
SSDEEP

12288:c1jffwkovHPGD9hdS7RKZk0ZpuaXeITRC9aYHmrgG9ahfADWinSCVBFuy0QcNOX5:cBffwkovAo7c2CESqGrgxfcrBFbtlP

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3644 1416 WerFault.exe 2024-05-15_f6aa86e634766a16ca92614bd905fea9_bkransomware_icedid.exe

pid	pid_target	process	target process
3644	1416	WerFault.exe	2024-05-15_f6aa86e634766a16ca92614bd905fea9_bkransomware_icedid.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-15_f6aa86e634766a16ca92614bd905fea9_bkransomware_icedid.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-15_f6aa86e634766a16ca92614bd905fea9_bkransomware_icedid.exe"
1⤵
PID:1416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1416 -s 532
2⤵
- Program crash
PID:3644

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1416 -ip 1416
1⤵
PID:2724