68848492f6cf49ea8639440aae60b606d364cd00158da763aedfdade101978b0

Analysis

max time kernel
138s
max time network
100s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 01:34

Target

2024-05-22_1c3eaac718c34a1fff1ee5b1fb27e442_avoslocker_cobalt-strike.exe
Size

838KB
MD5

1c3eaac718c34a1fff1ee5b1fb27e442
SHA1

774ea5af0d6fdf3994c06fe300cdb122219dd369
SHA256

68848492f6cf49ea8639440aae60b606d364cd00158da763aedfdade101978b0
SHA512

0f3ae339dd69e60504d0bc804306a3e5952c690cd0cadd11ccd6b0928e86a621315ce983cf98d447895e23ccc56e3738f5b5d98c30e3c72236641716487815ab
SSDEEP

12288:HJj5t6MewMDaAwBV73ikZfnQua7kAF4UWj8RSB31424vTti192MXXuh+V88k0vbB:pSMvikhn9314liqMXehI8jJZRuKoeu

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2904 212 WerFault.exe 2024-05-22_1c3eaac718c34a1fff1ee5b1fb27e442_avoslocker_cobalt-strike.exe

pid	pid_target	process	target process
2904	212	WerFault.exe	2024-05-22_1c3eaac718c34a1fff1ee5b1fb27e442_avoslocker_cobalt-strike.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-22_1c3eaac718c34a1fff1ee5b1fb27e442_avoslocker_cobalt-strike.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-22_1c3eaac718c34a1fff1ee5b1fb27e442_avoslocker_cobalt-strike.exe"
1⤵
PID:212

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 212 -s 236
2⤵
- Program crash
PID:2904

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 212 -ip 212
1⤵
PID:2020