Analysis
- max time kernel
119s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20220310-en - submitted
14/04/2022, 15:01
Static task
static1
Behavioral task
behavioral1
Sample
sample2.dll
Resource
win7-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
sample2.dll
Resource
win10v2004-20220310-en
0 signatures
0 seconds
General
- Target sample2.dll
- Size 2.3MB
- Sample220414-sd17aagda7
- SHA256 7fb70df5d535857b5c229254ec8274550cc3fe4ddbc0a78cdd98f3332c2629d8
- MD5 993578523d3c64d02a4af460694f7cf0
- SHA1 edecc2ef0c7a4ec9ed8d31c2cabb08631c91d081
- SHA512 39ae0d968d9839bd66450bc01a6ae8d29345190f108f4e4172bd2138eca098494a175b22d9549f3947d3bf93552f8a86f607c02f15596df30720be8818f95e94
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 2 IoCs
pid pid_target Process procid_target 4996 4036 WerFault.exe 79 4860 4036 WerFault.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\sample2.dll,#11⤵PID:4036
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4036 -s 4402⤵
- Program crash
PID:4996
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4036 -s 6002⤵
- Program crash
PID:4860
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4036 -ip 40361⤵PID:1732
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 504 -p 4036 -ip 40361⤵PID:5076