9dce49b70be1860eb0971739178fdad13ea79b31a14731b0bf8707ff4920cca9

Analysis

max time kernel
139s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 01:29

Target

SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.18362.exe
Size

1.9MB
MD5

0a0bdefa4788a249f8be620fa0cac283
SHA1

7b872b45db181e77f90abd32dfb0cc6c6d6ab4a2
SHA256

9dce49b70be1860eb0971739178fdad13ea79b31a14731b0bf8707ff4920cca9
SHA512

26165bddcb187a81af32c2599dd59c9b1b8f925f5b6011609b9fe23c7c50264429bbd9d472d1dba29af3de8cdecc22875ab1af6c63af609717ac173ecf48a057
SSDEEP

24576:VmJRmFvjJmZsZdmR7mRUgmfC6gIYv5CqlcGkQ/35r9OvBM+i72AlgeVmgTwJMsuH:DJZSWIY5BhIgtki0nzclTYVEBt88F

Score

3^/10

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid	pid_target	process	target process
4816	3048	WerFault.exe	SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.18362.exe
1408	3048	WerFault.exe	SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.18362.exe

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.18362.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.18362.exe"
1⤵
PID:3048

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3048 -s 224
2⤵
- Program crash
PID:4816

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3048 -s 224
2⤵
- Program crash
PID:1408

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3048 -ip 3048
1⤵
PID:3696

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 3048 -ip 3048
1⤵
PID:3448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4744,i,15142778360084620907,1763097090506261076,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:8
1⤵
PID:4164