Analysis
- max time kernel
140s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
08/07/2022, 15:42
Static task
static1
Behavioral task
behavioral1
Sample
2264-117-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
2264-117-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
- Target 2264-117-0x0000000180000000-0x0000000180009000-memory.dll
- Size 36KB
- Sample220708-s5sdfsgdbp
- SHA256 803e9807f20af230c454238055820283dc046c1e796af0dec54ea5c231eb9ad9
- MD5 1982069265c8986f38029e58b62fa5ff
- SHA1 9fb4d92fbe88ace50b03037bb7747c4e7cdd368e
- SHA512 c3b5f1335ea4b9394f44116305ffd40eeb4c3df277c57e02fb7a73126ea6c271590d881182b8b6f5b818dee6d892c6dccc9f47d26209de2a31600829d5d2573d
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4084 3584 WerFault.exe 77
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2264-117-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:3584
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3584 -s 2442⤵
- Program crash
PID:4084
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 452 -p 3584 -ip 35841⤵PID:412