Analysis
-
max time kernel
91s -
max time network
112s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
27/06/2022, 19:12
Static task
static1
Behavioral task
behavioral1
Sample
documents.lnk
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
documents.lnk
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
n3zarek.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
n3zarek.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
-
Target
n3zarek.dll
-
Size
1.4MB
-
MD5
98a63f31289d5b8106140da1d3fc2f60
-
SHA1
f479133350af108ed30e633067467df6f17a4fda
-
SHA256
c536f15022bc8cc16dede9cbd855008ed6c80908245e129425662948014d90c1
-
SHA512
bfe86795b6838cfe4c596d5dda9c7429a85ed61b43580d5b0137c3cdb508b8a1da386da8487907fdd003cda259029b98bdd97563ce2e4a4075fb333eb63ae2ad
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5036 4124 WerFault.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\n3zarek.dll,#11⤵PID:4124
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4124 -s 3282⤵
- Program crash
PID:5036
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 464 -p 4124 -ip 41241⤵PID:4160