6141f19757c9f853974e0d54db199f88c3a81e333a4f157091c87c8e76a4a617

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
15/04/2026, 04:10

Target
2026-04-15_30d1b9e7da0cd3ea8a0ef954da17aa21_elex_parallax_remcos_remocs_wannacry.exe
Size 118KB
Sample260415-ernlfsev3k
SHA256 6141f19757c9f853974e0d54db199f88c3a81e333a4f157091c87c8e76a4a617
MD5 30d1b9e7da0cd3ea8a0ef954da17aa21
SHA1 1f1916cecc236e7b18d86c6e5acf0aa208c5c354
SHA512 e9cea42544bb1c60a36daf393feedbd1e89c56bc7eb20fc57c184f8d46b033b325eb9cbb46ba6f3b0aa0afcd641252932f35a92af07edc045363fdae43c2c06a
SSDEEP 3072:do9ouOQ4BuxSH6uWp2hc5YZ10RJ1QUNfqYXarXWwH5Y+zQMCd:do9o5Q/xSavpiciJtYXarXWwH++zQMC
TLSH
T19BC3FA57F346C6A2E81603B107417FA6EBBCBC360A6E7157C388D0811D7588BE465ABF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1832	1592	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\2026-04-15_30d1b9e7da0cd3ea8a0ef954da17aa21_elex_parallax_remcos_remocs_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-04-15_30d1b9e7da0cd3ea8a0ef954da17aa21_elex_parallax_remcos_remocs_wannacry.exe"
1⤵
PID:1592
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1592 -s 8
  2⤵
  - Program crash
  PID:1832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1592 -ip 1592
1⤵
PID:4908