Analysis
- max time kernel
143s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
10/07/2022, 09:20
Static task
static1
Behavioral task
behavioral1
Sample
1520-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
1520-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
- Target 1520-54-0x0000000180000000-0x0000000180009000-memory.dll
- Size 36KB
- Sample220710-la2v3sddc4
- SHA256 376074f492525537909adb586df6454950e8424665ef9ece63c9ea90979bb238
- MD5 67d4c9296679b4fa1376dcd7ba3335c0
- SHA1 3a2cd39a4158d1b48c547250f501faf8d3f41cc0
- SHA512 f063f115619912cdc9dc9802c36da621ede39048389c9a36ad2cc38895df86a8e696c2d16bc853749ffaef1588561eeeb821c6eef3323a7a231a79e5ae3361fd
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2596 2748 WerFault.exe 49
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1520-54-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:2748
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2748 -s 2442⤵
- Program crash
PID:2596
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 2748 -ip 27481⤵PID:3604