e2b5c99857abc652d5e80973b6b9b6523a97ccb9e71680e0d0b75f8caf05ddd9

Analysis

max time kernel
132s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 08:45

Target
2024-06-03_4d84591a31d9bef23e8303dfce3dcfb8_virlock.exe
Size 188KB
Sample240603-kn28bshd6v
SHA256 e2b5c99857abc652d5e80973b6b9b6523a97ccb9e71680e0d0b75f8caf05ddd9
MD5 4d84591a31d9bef23e8303dfce3dcfb8
SHA1 516667b3fc1cfd2f71b52e7d011c2512befaecf2
SHA512 3cfcb1e8ba7fda3b8a0cca15047f1f68494003deb3cd08686f64e25c41e4df805f26a6157008bdbbc86dd3cb6d6bd44f2766aded2959d6f2339464692cd3aa7c
SSDEEP 3072:6f++ukIUBhe4X7fLqql9qAjzB9qbnzkwGm7xsLg8J17qGfUm9qjdnt5/IQbwdho8:6/uRUBhe2zDFzqvkwd7MTHqGfUm9qpn4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1716	2788	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\2024-06-03_4d84591a31d9bef23e8303dfce3dcfb8_virlock.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-03_4d84591a31d9bef23e8303dfce3dcfb8_virlock.exe"
1⤵
PID:2788
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2788 -s 232
  2⤵
  - Program crash
  PID:1716

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2788 -ip 2788
1⤵
PID:412

memory/2788-0-0x0000000000400000-0x0000000000430000-memory.dmp

Download

memory/2788-1-0x0000000000400000-0x0000000000430000-memory.dmp

Download