79586c6938e7f1ecfb268124f2570f6c778621f9b0aba219f8a6d7f97e6d1adf

Analysis

max time kernel
129s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 01:27

Target

SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.28760.19665.exe
Size

308KB
MD5

f3fa20ea7cf6fd9b74e6ae83aa4785fd
SHA1

c55497f72442e5d2c2710619114da1e2e21a84d6
SHA256

79586c6938e7f1ecfb268124f2570f6c778621f9b0aba219f8a6d7f97e6d1adf
SHA512

07349f28e9fa5e84262bcc2134ceecdccb99aa71cef37e305cd48330d48972ffb730159ae1e8dd8e930ce18b3e06c505e6d3281e832e3ce959672ec3761cf2ea
SSDEEP

3072:dRIrddAIIslY1FX6oPFX45zjfuiuOfNwv9NuTBfXvXO4wJ:dRe3AItG6ohIzzu+Sv9sTB/vX5wJ

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2968 4524 WerFault.exe SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.28760.19665.exe

pid	pid_target	process	target process
2968	4524	WerFault.exe	SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.28760.19665.exe

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.28760.19665.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.28760.19665.exe"
1⤵
PID:4524

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4524 -s 220
2⤵
- Program crash
PID:2968

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4524 -ip 4524
1⤵
PID:1104