Overview

overview

10

Static

static

10

fadb4aa2c4...0f.dll

windows7_x64

3

fadb4aa2c4...0f.dll

windows10_x64

3

Analysis

  • max time kernel
    11s
  • max time network
    112s
  • platform
    windows10_x64
  • resource
    win10v20201028
  • submitted
    12-11-2020 14:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fadb4aa2c48a407c9e482cdad076173f54676a6ae20928ea5f36305c75971f0f.dll

  • Size

    304KB

  • MD5

    fc257dc14f4be29ccd62db4e785e350d

  • SHA1

    fdbf4c032a9d95745de18f3b34c213f91a2db73c

  • SHA256

    fadb4aa2c48a407c9e482cdad076173f54676a6ae20928ea5f36305c75971f0f

  • SHA512

    1f687eaf6f506f14cc67f7de8e7dd7513e958c63936ec643ca5a454faca6e9f4e25a5351f0c6591b51faf08712b2af1af2925299581247148b429aba7ed3d98e

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\fadb4aa2c48a407c9e482cdad076173f54676a6ae20928ea5f36305c75971f0f.dll,#1
    1⤵
      PID:4076
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 4076 -s 220
        2⤵
        • Program crash
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1368

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1368-0-0x00000212E60C0000-0x00000212E60C1000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-2-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-3-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-4-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-5-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-6-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-1-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-7-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-8-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-9-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-10-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-11-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-12-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download
    • memory/1368-13-0x00000212E6B30000-0x00000212E6B31000-memory.dmp
      Filesize

      4KB

      Download