6cee80f3c536692c50cc78f18a2544664d53bb9b8acb6af6e449203b36e6c4c3

Analysis

max time kernel
131s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
24/05/2024, 14:15

Target

2024-05-24_b5ce4a8ab3269c3eadcdd9e7c6278e2f_bkransomware.exe
Size

904KB
MD5

b5ce4a8ab3269c3eadcdd9e7c6278e2f
SHA1

c9996cd1920957cf140f07c756c09fab82bc368a
SHA256

6cee80f3c536692c50cc78f18a2544664d53bb9b8acb6af6e449203b36e6c4c3
SHA512

77ba5f4161031897dbb218d44cd34ebb2fccecf4a092eeed520f9d8aea01945c164de612ea3bc6b933f86d00a7ad96a213439dff09c5dacbeddff3345983f488
SSDEEP

24576:AABmKtS7W4FaulPf4nyJzrS9Ypr5SV1y5QZK7ZjE5Tj+XcNpyOvjZLS4:AABmpEulPwnyJD2gOvjZLS4

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3052	4964	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\2024-05-24_b5ce4a8ab3269c3eadcdd9e7c6278e2f_bkransomware.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-24_b5ce4a8ab3269c3eadcdd9e7c6278e2f_bkransomware.exe"
1⤵
PID:4964
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4964 -s 532
  2⤵
  - Program crash
  PID:3052

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4964 -ip 4964
1⤵
PID:4360