Analysis
-
max time kernel
91s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
09/06/2022, 17:12
General
-
Target
9bf1d98278c83fb073371a4cba49dc174566388e07ae512d91a4cf1226becd16.dll
-
Size
1.7MB
-
MD5
276c0e4adbeb33402c1e46c69caf88ad
-
SHA1
a1665cd7803f474543ca78dc1d11afe1839c9f8f
-
SHA256
9bf1d98278c83fb073371a4cba49dc174566388e07ae512d91a4cf1226becd16
-
SHA512
66945fa8e9c1c40197f708e27223e0964dc659302b68475dfbe2991d54e54381969164b3213e9069cc0c044b91add068419c56f7d09542a1718a2473d8fde7e2
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\9bf1d98278c83fb073371a4cba49dc174566388e07ae512d91a4cf1226becd16.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2772 -s 3282⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2772 -s 3282⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 420 -p 2772 -ip 27721⤵