971bb374f3f4c1d179697b3a0f387eb3360ee3ddb888eb2335d480efc2443f7a

Analysis

max time kernel
138s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 18:22

Target

2024-05-23_e7d2b8f60ad367cf1b20c1664dfabcc7_mafia.exe
Size

2.1MB
MD5

e7d2b8f60ad367cf1b20c1664dfabcc7
SHA1

a95b78692ddc9b950a44689971e339e4f3102211
SHA256

971bb374f3f4c1d179697b3a0f387eb3360ee3ddb888eb2335d480efc2443f7a
SHA512

ac45381965d8f8967d490ce7597d96b6241efc3e33152bcbdf3c70f8f655d8af12b3d0dd2abe796c507ba142e6f0906b638b28f41db2028f24339c57336a27ff
SSDEEP

49152:e9yiCJ5rFwnANZGEXeZ+9ex8egOSDAmosh3ANkTTl:dJ5rFwnApeJgOS9V3AM

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2632 3432 WerFault.exe 2024-05-23_e7d2b8f60ad367cf1b20c1664dfabcc7_mafia.exe

pid	pid_target	process	target process
2632	3432	WerFault.exe	2024-05-23_e7d2b8f60ad367cf1b20c1664dfabcc7_mafia.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-23_e7d2b8f60ad367cf1b20c1664dfabcc7_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-23_e7d2b8f60ad367cf1b20c1664dfabcc7_mafia.exe"
1⤵
PID:3432
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3432 -s 380
  2⤵
  - Program crash
  PID:2632

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3432 -ip 3432
1⤵
PID:1516