d833cef5dd354e8a426529996d00925da6db8502add648e899235ab401ee0de5

Analysis

max time kernel
135s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
17-06-2024 21:45

Target

2024-06-17_fc55cdb408a2879fafba415fe727ffdb_cryptolocker_JaffaCakes118.exe
Size

393KB
MD5

2e6d5efa6f335fdacb87a7b528307c08
SHA1

2a5e0b1101cf74858949d2887fead89df4248959
SHA256

d833cef5dd354e8a426529996d00925da6db8502add648e899235ab401ee0de5
SHA512

927f3502803ff5cf55e53d4ec1308cc2914060e2e0edaf4dd46811950e1db8c6f1f3b5e8fc8ff87925348d5749734815c74c4e9457df18817f78b2740b7c36fc
SSDEEP

6144:eiLAQrKanaU5AsSXYCQ6Kj28ov71tl9KXDQrOkcYB1RN:eiLZV15AszCQ6KC8oz1RKQOhe1RN

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4708 3824 WerFault.exe 2024-06-17_fc55cdb408a2879fafba415fe727ffdb_cryptolocker_JaffaCakes118.exe

pid	pid_target	process	target process
4708	3824	WerFault.exe	2024-06-17_fc55cdb408a2879fafba415fe727ffdb_cryptolocker_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-17_fc55cdb408a2879fafba415fe727ffdb_cryptolocker_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-17_fc55cdb408a2879fafba415fe727ffdb_cryptolocker_JaffaCakes118.exe"
1⤵
PID:3824

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3824 -s 224
2⤵
- Program crash
PID:4708

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3824 -ip 3824
1⤵
PID:116