fc9da0643ec0f4b03a8d10349e2c243c2daa65ae749b6a960edf34da59453cac

Analysis

max time kernel
213s
max time network
311s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
20-07-2024 20:41

Target

ransomware_notes-main/blackhunt/#BlackHunt_ReadMe.hta
Size

12KB
MD5

d512f8d61b24ae9308854a4217ed9068
SHA1

37f08f01e0251c8b0dc2472ea6d425efd98d8166
SHA256

39331e96cb53a91d3e4691375a665c9026f209a40aa3073a06c433a2504fc7a1
SHA512

7b9059587d1de21101c57e2a199c1b43d2e23e6244d5c7fda2d116dacc4b227ed1d6a82c5726e78b8c6aa310bb217b0424cf2c3f40d5613ea325c5ba2d1650d9
SSDEEP

192:6zNWVQDnFfSkURroocVPEnvQIl4EsD3nDk/hp9HE96EzIAaXCA/Mn3W9qz6OsQa7:SKAFfFU1QEnk3noZfE9L1aeLzNst4wV

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4772	4500	WerFault.exe	81

C:\Windows\SysWOW64\mshta.exe
C:\Windows\SysWOW64\mshta.exe "C:\Users\Admin\AppData\Local\Temp\ransomware_notes-main\blackhunt\#BlackHunt_ReadMe.hta" {1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}{1E460BD7-F1C3-4B2E-88BF-4E770A288AF5}
1⤵
PID:4500
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4500 -s 1348
  2⤵
  - Program crash
  PID:4772

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4500 -ip 4500
1⤵
PID:1428