48e7e1700010c25662ae7324d7798570e95d7227ef74a4fadf7b7d6e695b5a96 | Triage

Analysis

max time kernel
79s
max time network
25s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
12-05-2022 15:18

Sharing

Report Analysis Logs

General

Target

TO PC/_overlapped.dll
Size

45KB
MD5

0d41b13272bdf3655470f280009a67e5
SHA1

47285ca0a012fa747ec0f441266c88792847842b
SHA256

8cd7e2c9892146816357c3e045ab7571959f6355f17a2cc6d8e72c184d67be2d
SHA512

2db7d0f2210798bba2fd416876ee2f212c1d153d839f38660e7d0c6e2b5e51d96c7d400b3a477da02aa5027a3701da4341bf96a393997851c79a2ae9fb686945

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3104 4284 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\TO PC\_overlapped.dll",#1
1⤵
PID:4284

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4284 -s 364
2⤵
- Program crash
PID:3104

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4284 -ip 4284
1⤵
PID:4744

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...