Analysis
- max time kernel
132s - max time network
143s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
23/08/2022, 12:33
Behavioral task
behavioral1
Sample
1764-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1764-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target 1764-54-0x0000000180000000-0x0000000180009000-memory.dll
- Size 36KB
- Sample220823-prjmlseffm
- SHA256 d453e80aefbe3fabd7dd9606cce1bbce6dcafb0e99f0b5592c7752929a66a756
- MD5 4dd782232770acfd8958815f02b44e7f
- SHA1 e447cb2b4577c1277becefda1c9d4effedf28b3b
- SHA512 967c3c24d5a138ff32b5b8c454233bbc58413e84fd7ba24323e5e9285c999775207bbaecf48c655604a56fff5df2d7ef00069f49ea8e63606442141855f151f7
- MD5 SHA1 SHA512
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4880 1116 WerFault.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1764-54-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:1116
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1116 -s 2402⤵
- Program crash
PID:4880
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 436 -p 1116 -ip 11161⤵PID:2640