Analysis
-
max time kernel
90s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
24/06/2022, 01:05
Static task
static1
Behavioral task
behavioral1
Sample
documents.lnk
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
documents.lnk
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
m3n4rat.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
m3n4rat.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
-
Target
m3n4rat.dll
-
Size
1.8MB
-
MD5
82fc2d72fa9e510609999618560bb66d
-
SHA1
f826f1628e71c9aa85dfd2a67e7716b0787ae40f
-
SHA256
f793313e6ab482167d0da6f456a148a8ea528877d0d4166a0219b43290862561
-
SHA512
8663ad819ba6faa1cae9db0ab97c0f790e2e983ce2dd4692ea690ff82b3aa2a1c7d756e8dfa62e1b17252f0c677385d2a225b137fca7e35a07a17d76280cf07b
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3280 3172 WerFault.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\m3n4rat.dll,#11⤵PID:3172
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3172 -s 3282⤵
- Program crash
PID:3280
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 404 -p 3172 -ip 31721⤵PID:3168