423f75097f80b27ae154abad360321285aa0735a4f34e8a015c6859b4e42b268

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
24-05-2024 16:05

Target

2024-05-24_052038f3c3c00966525133da727287e9_avoslocker_cobalt-strike_raccoonstealer.exe
Size

583KB
MD5

052038f3c3c00966525133da727287e9
SHA1

7cc10fe11987cdc301107a78a0c2d476e4b9ac37
SHA256

423f75097f80b27ae154abad360321285aa0735a4f34e8a015c6859b4e42b268
SHA512

cc9e80ecd2ca0642743cfa9b1791c80a6b42fb3e50b589168b4004db80b37695ba90a8c93277ab96e859879c8abe2fdfa6919b2f0a7ba03ed11a9251ab7287aa
SSDEEP

12288:7RaXb/FXVHMBhx/D8WlhVe2f1yt0uWWgaRjUut26sFh2GacnB1/e:7IXbzHMBhxbhrVeOlfMor/e

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4336 1376 WerFault.exe 2024-05-24_052038f3c3c00966525133da727287e9_avoslocker_cobalt-strike_raccoonstealer.exe

pid	pid_target	process	target process
4336	1376	WerFault.exe	2024-05-24_052038f3c3c00966525133da727287e9_avoslocker_cobalt-strike_raccoonstealer.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-24_052038f3c3c00966525133da727287e9_avoslocker_cobalt-strike_raccoonstealer.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-24_052038f3c3c00966525133da727287e9_avoslocker_cobalt-strike_raccoonstealer.exe"
1⤵
PID:1376

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1376 -s 520
2⤵
- Program crash
PID:4336

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1376 -ip 1376
1⤵
PID:3232