Analysis
- max time kernel
107s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
06/07/2022, 11:56
Static task
static1
Behavioral task
behavioral1
Sample
2a0b83c316219ed8c7ce1d14edf09794fa76a71cb04348d2a332991f3fceab2b.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
2a0b83c316219ed8c7ce1d14edf09794fa76a71cb04348d2a332991f3fceab2b.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
- Target 2a0b83c316219ed8c7ce1d14edf09794fa76a71cb04348d2a332991f3fceab2b.dll
- Size 163KB
- Sample220706-n39shacdhm
- SHA256 2a0b83c316219ed8c7ce1d14edf09794fa76a71cb04348d2a332991f3fceab2b
- MD5 84b20e95d52f38bb4f6c998719660c35
- SHA1 9af6dde77c274af5384dfea76a414bc60a99c878
- SHA512 56922ecf1cee78c8ec76bad9c5d6aec5c56bed9cfc025d66f1db5541023a962c9784b9708e82c5cb84ed828f053e15186fd7e0483666eaee111c4cbdcac81ea0
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1660 3192 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2a0b83c316219ed8c7ce1d14edf09794fa76a71cb04348d2a332991f3fceab2b.dll,#11⤵PID:3192
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3192 -s 3282⤵
- Program crash
PID:1660
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 420 -p 3192 -ip 31921⤵PID:4956