Analysis
-
max time kernel
144s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
10/07/2022, 07:34
Static task
static1
Behavioral task
behavioral1
Sample
1276-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
1276-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
-
Target
1276-54-0x0000000180000000-0x0000000180009000-memory.dll
-
Size
36KB
-
MD5
3ab79b78927f55877fa99995f17f3c6a
-
SHA1
847e832ddcbff9f1dc5831e6ff9bf9af5fe3829a
-
SHA256
1f512f99294da0f2f7165617805a13d7339feb8b3e1acb03e49f6392296d68f6
-
SHA512
0c6913a4dfa0b1df33ab88f03d72ce5a8f169c68427634795beb41eb02c6ad24c176c514f95db1c84fe8d9120e223169511be657aeeacd6a30ce4857563ea325
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1336 3388 WerFault.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1276-54-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:3388
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3388 -s 2402⤵
- Program crash
PID:1336
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 456 -p 3388 -ip 33881⤵PID:2836