Analysis
- max time kernel
149s - max time network
162s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
08/07/2022, 02:45
Static task
static1
Behavioral task
behavioral1
Sample
1280-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
1280-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
- Target 1280-54-0x0000000180000000-0x0000000180009000-memory.dll
- Size 36KB
- Sample220708-c8t4fseber
- SHA256 dcec8c4c8be0f79f005860ea0550fc81bad89f74b9e568d2621ba2f5559042e0
- MD5 5f5932e55925c7f986fdbd7d01e5d0ea
- SHA1 bce83ba4248806693054a2214631a2ff98e4a5a1
- SHA512 d7bc0baf90abd1210cdf7cae84661b14325ef09d114c190a90504d40dfb7e150b53b9121f97c0d65e0f426f6ebe6f2994e997984b14259c7f5e3153fec12d8a3
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2660 2424 WerFault.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1280-54-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:2424
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2424 -s 2402⤵
- Program crash
PID:2660
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 2424 -ip 24241⤵PID:2120