Analysis
- max time kernel
141s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20220721-en - resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system - submitted
11/08/2022, 06:32
Static task
static1
Behavioral task
behavioral1
Sample
d1abe1638d506630224121d0dca98131.dll
Resource
win7-20220715-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
d1abe1638d506630224121d0dca98131.dll
Resource
win10v2004-20220721-en
1 signatures
150 seconds
General
- Target d1abe1638d506630224121d0dca98131.dll
- Size 995KB
- Sample220811-hamvdaeah7
- SHA256 99be525b748064edaa30caa911b1122187139c463ad29068c3ee5cf69eed774e
- MD5 d1abe1638d506630224121d0dca98131
- SHA1 571aa72b48dab70802ef9f6a6b5b226e82a29d9d
- SHA512 8e5fd6cca337183f8edfe22e7b31d3c958a481c222c1adfaa13dd8102c09b26fff388ff64788a03bbb00087a7dac5882a6f69a1ff3c4fd660b2d3b24f4d7d09c
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4016 4860 WerFault.exe 81
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\d1abe1638d506630224121d0dca98131.dll1⤵PID:4860
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4860 -s 10162⤵
- Program crash
PID:4016
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 460 -p 4860 -ip 48601⤵PID:808