Analysis
-
max time kernel
139s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
28/06/2022, 00:57
Static task
static1
Behavioral task
behavioral1
Sample
documents.lnk
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
documents.lnk
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
n3zarek.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral4
Sample
n3zarek.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
-
Target
n3zarek.dll
-
Size
1.4MB
-
MD5
b41810bbc67d20adb256a0d30674c881
-
SHA1
e332e30611b36bbda3ffa98dbdf57590dab5b932
-
SHA256
924eb7c79148a8dc9cd66ace2702788c172a82ca8744b3283bd030ec0414e80b
-
SHA512
8a43bfbaa05b4dc1949b7030236ff249d54ead3b50c8ce24960d52f7b13a5903b4c764f59c453f2249ebaddcf65459c9a92b3b7f81304e9506ad5a239b274735
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3396 1056 WerFault.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\n3zarek.dll,#11⤵PID:1056
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1056 -s 3282⤵
- Program crash
PID:3396
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 1056 -ip 10561⤵PID:1848