7fb70df5d535857b5c229254ec8274550cc3fe4ddbc0a78cdd98f3332c2629d8 | Triage

Analysis

max time kernel
119s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220310-en
submitted
14-04-2022 15:01

Sharing

Report Analysis Logs

General

Target

sample2.dll
Size

2.3MB
MD5

993578523d3c64d02a4af460694f7cf0
SHA1

edecc2ef0c7a4ec9ed8d31c2cabb08631c91d081
SHA256

7fb70df5d535857b5c229254ec8274550cc3fe4ddbc0a78cdd98f3332c2629d8
SHA512

39ae0d968d9839bd66450bc01a6ae8d29345190f108f4e4172bd2138eca098494a175b22d9549f3947d3bf93552f8a86f607c02f15596df30720be8818f95e94

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid pid_target process target process

4996 4036 WerFault.exe rundll32.exe
4860 4036 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\sample2.dll,#1
1⤵
PID:4036
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4036 -s 440
  2⤵
  - Program crash
  PID:4996
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4036 -s 600
  2⤵
  - Program crash
  PID:4860

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4036 -ip 4036
1⤵
PID:1732

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 504 -p 4036 -ip 4036
1⤵
PID:5076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads