Analysis
- max time kernel
140s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
10/07/2022, 09:18
Static task
static1
Behavioral task
behavioral1
Sample
1520-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
1520-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
- Target 1520-54-0x0000000180000000-0x0000000180009000-memory.dll
- Size 36KB
- Sample220710-k932raaggm
- SHA256 376074f492525537909adb586df6454950e8424665ef9ece63c9ea90979bb238
- MD5 67d4c9296679b4fa1376dcd7ba3335c0
- SHA1 3a2cd39a4158d1b48c547250f501faf8d3f41cc0
- SHA512 f063f115619912cdc9dc9802c36da621ede39048389c9a36ad2cc38895df86a8e696c2d16bc853749ffaef1588561eeeb821c6eef3323a7a231a79e5ae3361fd
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 532 3548 WerFault.exe 38
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1520-54-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:3548
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3548 -s 2402⤵
- Program crash
PID:532
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 440 -p 3548 -ip 35481⤵PID:4532