Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
22/07/2024, 11:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-07-22_49cc93d6749501350da075e2594c9be7_bkransomware.exe
Resource
win7-20240708-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-07-22_49cc93d6749501350da075e2594c9be7_bkransomware.exe
Resource
win10v2004-20240709-en
1 signatures
150 seconds
General
-
Target
2024-07-22_49cc93d6749501350da075e2594c9be7_bkransomware.exe
-
Size
880KB
-
MD5
49cc93d6749501350da075e2594c9be7
-
SHA1
bee32704f33e876a2f83668c8813af600e53fa16
-
SHA256
206e8359257aa9743fa184f0b42b0cf8955776a534359546bc0d603c8979ea48
-
SHA512
5ad83b0dd30d19ec5386dfd5bf03eb56bf15be527003ee75b4ce9ff8a42cdb9d30d230ede9180c437199d4aeeaf5e14f462d081cdfc6781ca4ee0497f1a2626f
-
SSDEEP
24576:tOUv4uJRstZBL2fmHkqjlI48U0VAsSW0sI0:VLJatZdgmHk4lLzsI0
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1924 3156 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-22_49cc93d6749501350da075e2594c9be7_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-22_49cc93d6749501350da075e2594c9be7_bkransomware.exe"1⤵PID:3156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3156 -s 5322⤵
- Program crash
PID:1924
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3156 -ip 31561⤵PID:4324