94416fab312b7d03c03c483fd34ce40a90d211baca374a294a45a86a3b1068b9

Analysis

max time kernel
132s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 03:06

Target
2024-05-25_e923ed6216b3177cce3032a45914ba8a_bkransomware.exe
Size 952KB
Sample240525-dltpvace75
SHA256 94416fab312b7d03c03c483fd34ce40a90d211baca374a294a45a86a3b1068b9
MD5 e923ed6216b3177cce3032a45914ba8a
SHA1 de0d626e5e4f43889ce9110169f5cffbbac4cc0d
SHA512 048d0d457c66d1a0769059160f39432adc02fb2ffddcb609144f2a1462ca582fd3d01ad24e9a7ad4033504cb4fa3514c72bff85f27e0d343956ccba24db1d3d9
SSDEEP 12288:8X+sJ8yKGga8UTyPA0/Reotp1+vkV/sqrwM+ave9aiLW4vAI82e:y+sCx7NTY0/RyqknO4vAI8Z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2684	1416	WerFault.exe	89

C:\Users\Admin\AppData\Local\Temp\2024-05-25_e923ed6216b3177cce3032a45914ba8a_bkransomware.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-25_e923ed6216b3177cce3032a45914ba8a_bkransomware.exe"
1⤵
PID:1416
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1416 -s 532
  2⤵
  - Program crash
  PID:2684

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1416 -ip 1416
1⤵
PID:3772

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4196,i,1999448010053300448,1112699187621658374,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:8
1⤵
PID:3264