70068a5deb3aaff4803ea43e1e7a16285042d484263cd6a702474cdecc1539d9

Analysis

max time kernel
130s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
24-05-2024 20:02

Target

2024-05-24_7dfaa03ca8e272574e457c53edb45bbf_mafia.exe
Size

349KB
MD5

7dfaa03ca8e272574e457c53edb45bbf
SHA1

bf12de757c4244dab24621dfb2cdb4ba501bb82b
SHA256

70068a5deb3aaff4803ea43e1e7a16285042d484263cd6a702474cdecc1539d9
SHA512

0abf488e8269c70c68ff415305f2728f249eb706c69b5cb785cec73ce490d460a508ce5c6d5f80a9da05d438d12867caae1007bb0070271aa055e99d364571fa
SSDEEP

6144:k+jfY43T97LNTJQnzkr5meQzK0uY5CYM3nyYSJvBxma+L6zYUPyBt4g9Y:k+jffT97LNJQnzkr5meQzK0uuCYMCnzj

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3896 4860 WerFault.exe 2024-05-24_7dfaa03ca8e272574e457c53edb45bbf_mafia.exe

pid	pid_target	process	target process
3896	4860	WerFault.exe	2024-05-24_7dfaa03ca8e272574e457c53edb45bbf_mafia.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-24_7dfaa03ca8e272574e457c53edb45bbf_mafia.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-24_7dfaa03ca8e272574e457c53edb45bbf_mafia.exe"
1⤵
PID:4860

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4860 -s 228
2⤵
- Program crash
PID:3896

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4860 -ip 4860
1⤵
PID:1636