Analysis
-
max time kernel
32s -
max time network
79s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
15-04-2022 17:28
Static task
static1
Behavioral task
behavioral1
Sample
516-70-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
516-70-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
516-70-0x0000000180000000-0x0000000180009000-memory.dll
-
Size
36KB
-
MD5
f9f00ec1b1304529392bfcd5f3912d57
-
SHA1
97cd688f685cea4c28ba545bef27da15ba6ae934
-
SHA256
598d3289405846f66a5a42d2b6d9c314496a615385b46a2817b77030f2a9cc55
-
SHA512
8c89cc6684424aedbfc59a0cf3936987249998d881034ad1fc081a97f52d08e1893d317ee51c7af4cc5b6f57bcaa8fe888f63cc3b5c19bf184bb1aff809097bb
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1424 2992 WerFault.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\516-70-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2992 -s 2442⤵
- Program crash
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 2992 -ip 29921⤵