Analysis
- max time kernel
123s - max time network
173s - platform
windows10-2004_x64 - resource
win10v2004-20220310-en - submitted
13/04/2022, 09:03
Static task
static1
Behavioral task
behavioral1
Sample
a3cd08afd7317d1619fba83c109f268b4b60429b4eb7c97fc274f92ff4fe17a2.dll
Resource
win7-20220331-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a3cd08afd7317d1619fba83c109f268b4b60429b4eb7c97fc274f92ff4fe17a2.dll
Resource
win10v2004-20220310-en
0 signatures
0 seconds
General
- Target a3cd08afd7317d1619fba83c109f268b4b60429b4eb7c97fc274f92ff4fe17a2.dll
- Size 95KB
- Sample220413-kz15eaead2
- SHA256 a3cd08afd7317d1619fba83c109f268b4b60429b4eb7c97fc274f92ff4fe17a2
- MD5 57a22e74ba27b034613b0c6ac54a10d5
- SHA1 c1d312762d598831d431b08e47075047582856aa
- SHA512 f319d5bf967005ec2b4a86e84f2188f321a8994480687c81645a5c7ff1b69450cf1f78182c9658618c74886de8efa7380c5043d74c61d023b1903fcd3b187740
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1608 4888 WerFault.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\a3cd08afd7317d1619fba83c109f268b4b60429b4eb7c97fc274f92ff4fe17a2.dll,#11⤵PID:4888
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4888 -s 3562⤵
- Program crash
PID:1608
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 420 -p 4888 -ip 48881⤵PID:2484