Analysis
- max time kernel
117s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
20/06/2022, 06:09
Static task
static1
Behavioral task
behavioral1
Sample
94f7bc1e910866c5ed1b06242e82c8d5379d143123ff255b87fc78db98c49ae2.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
94f7bc1e910866c5ed1b06242e82c8d5379d143123ff255b87fc78db98c49ae2.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
- Target 94f7bc1e910866c5ed1b06242e82c8d5379d143123ff255b87fc78db98c49ae2.dll
- Size 1.1MB
- Sample220620-gwkfpsgfbm
- SHA256 94f7bc1e910866c5ed1b06242e82c8d5379d143123ff255b87fc78db98c49ae2
- MD5 b3351695a7cd6c72a5b17ebb8c2c5e54
- SHA1 8e96e89113601ac2ebf022b72a2aa6e2c2eb992a
- SHA512 e69594d106ee37c629f6f4559a2caa4b689440f17a73a635aa6ba20de921926e63a4fea249239dcbcf895bd66cb004d9840f98c018854bd8159d117720c9380d
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4768 4276 WerFault.exe 78
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\94f7bc1e910866c5ed1b06242e82c8d5379d143123ff255b87fc78db98c49ae2.dll,#11⤵PID:4276
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4276 -s 2442⤵
- Program crash
PID:4768
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 368 -p 4276 -ip 42761⤵PID:4220