Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
15/06/2024, 17:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-06-15_196c44ef2ee996e04e1f51c1491de07c_virlock.exe
Resource
win7-20240508-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-15_196c44ef2ee996e04e1f51c1491de07c_virlock.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
2024-06-15_196c44ef2ee996e04e1f51c1491de07c_virlock.exe
-
Size
454KB
-
MD5
196c44ef2ee996e04e1f51c1491de07c
-
SHA1
b3bfb52ca0b1dc754e13913f62d35205e7c527c5
-
SHA256
5200995a0da5fe41dc41b0dcb2060784944f37bcf98feae2071268f01216b165
-
SHA512
e89c7f3d347b176c60411779d7510d857c4a01fb5d39c18a39613add5ef494f2001b3ee9a3b9fcf05d398363ff62e7aa30c401665d6d4b4500774bbd276350b1
-
SSDEEP
6144:aIIRBQ5d1rPpTFbXrM7bW1H7M8f9Z0mNplX4XCRrcMFADwYCuMsligT/Q5MS/:aIIPEPxFCWN7vZLNLqCRrctb65MM
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3296 528 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-15_196c44ef2ee996e04e1f51c1491de07c_virlock.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-15_196c44ef2ee996e04e1f51c1491de07c_virlock.exe"1⤵PID:528
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 528 -s 2242⤵
- Program crash
PID:3296
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 528 -ip 5281⤵PID:4520