5d822155740ce605250f12b287cca45f54ecdd4122ca0e264bc6cc185a15c6bc

Analysis

max time kernel
132s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 19:02

Target

202405220c8a82c8f3fb98efa5c7a07b4c7039f3bkransomwaregandcrabkaragany.exe
Size

155KB
MD5

0c8a82c8f3fb98efa5c7a07b4c7039f3
SHA1

0bfa1e3a5b49e4e531126cf91bd18cd4bdbda936
SHA256

5d822155740ce605250f12b287cca45f54ecdd4122ca0e264bc6cc185a15c6bc
SHA512

c5c4c8ca0c684a7946518d07ad595544a81f7a86fd4ea453a0fef9610b2a9ab9e242a54dfb58923475cbe9317e11f0d084dbf20e75447af635aa368d2b7968b3
SSDEEP

3072:S5K/B0toLoSNJ3lxwsx89TSdBgjMqqDL2/TOK2yG:ScytwlWTTSdBgQqqDL6SKW

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2492 3512 WerFault.exe 202405220c8a82c8f3fb98efa5c7a07b4c7039f3bkransomwaregandcrabkaragany.exe

pid	pid_target	process	target process
2492	3512	WerFault.exe	202405220c8a82c8f3fb98efa5c7a07b4c7039f3bkransomwaregandcrabkaragany.exe

C:\Users\Admin\AppData\Local\Temp\202405220c8a82c8f3fb98efa5c7a07b4c7039f3bkransomwaregandcrabkaragany.exe
"C:\Users\Admin\AppData\Local\Temp\202405220c8a82c8f3fb98efa5c7a07b4c7039f3bkransomwaregandcrabkaragany.exe"
1⤵
PID:3512
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3512 -s 264
  2⤵
  - Program crash
  PID:2492

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3512 -ip 3512
1⤵
PID:3528