Analysis
-
max time kernel
91s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
30-06-2022 21:31
Static task
static1
Behavioral task
behavioral1
Sample
1672-130-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
1672-130-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
1672-130-0x0000000180000000-0x0000000180009000-memory.dll
-
Size
36KB
-
MD5
6be68140ee0159a0d24b9e1f9d5f8df6
-
SHA1
625d8756bb718b2227387409492eae2aa249bf59
-
SHA256
9028a5967fb73c9da5cd46659cc08152e4adc78b14b015b32ee44a55b65a5498
-
SHA512
796791819c56e44d328f5ac172e9d64ad62e6e47185b334c79a8f82770080faccf94034470252fb4cae6be54d9ae68201ee02c5fe03d85220b8683efc5569c91
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4884 3112 WerFault.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1672-130-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:3112
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3112 -s 2402⤵
- Program crash
PID:4884
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 3112 -ip 31121⤵PID:560