Analysis
- max time kernel
138s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
14/06/2022, 19:41
Static task
static1
Behavioral task
behavioral1
Sample
19a.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
19a.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
- Target 19a.dll
- Size 1.1MB
- Sample220614-yd5scsebd6
- SHA256 5fa56c3c2cc2b06792ce65be87efd3930d66d8d80791ddc76204f841ac261f43
- MD5 9eed94695a18301152a1fef1de8c07d1
- SHA1 f93a7a8bd08dc1e22179aee66a13ab0606e09e07
- SHA512 b51f58874428e5911f2b97977fd334b068117495381045db7f8deb08848fbc40d958a0ea16e99751e32445e67e883c2a3e80628f45e1cf96117a72efa95c9e81
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1348 4048 WerFault.exe 77
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\19a.dll,#11⤵PID:4048
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4048 -s 3282⤵
- Program crash
PID:1348
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 416 -p 4048 -ip 40481⤵PID:3200