Analysis
-
max time kernel
91s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
21/06/2022, 18:49
Static task
static1
Behavioral task
behavioral1
Sample
documents.lnk
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
documents.lnk
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
s3negar.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
s3negar.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
-
Target
s3negar.dll
-
Size
1.6MB
-
MD5
e96805cad0ee3a8fe51a1f15755d62cc
-
SHA1
c597e13cb44cebf5401ccb56e92ef64c18128e34
-
SHA256
262cb83dca4b482b1fb74e10c0eb5e668ba605081d5d42d559e80b864de8c3e3
-
SHA512
b1c45021f018ccf2a2e100aabb770bfc047388b991d3e4547651ee69ccdf66de6393e668e985b612f552fdc1ba137b636100f9259082c17682844456d149d3bf
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 804 1588 WerFault.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\s3negar.dll,#11⤵PID:1588
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1588 -s 3282⤵
- Program crash
PID:804
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 432 -p 1588 -ip 15881⤵PID:1888