Analysis
- max time kernel
85s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
23/08/2022, 16:35
Behavioral task
behavioral1
Sample
1388-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1388-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target 1388-54-0x0000000180000000-0x0000000180009000-memory.dll
- Size 36KB
- Sample220823-t3wtjagegr
- SHA256 465183796f1d51b86f7abd553c9346956dd384c555db39d99a8f872d3fa61bbd
- MD5 26813a19e12e123191edffd4ae01893d
- SHA1 6962b2a99550d91eb54ba5121f5f74c580af14ab
- SHA512 11f5ec97c4d68c8fa39b99225caa0836af153de86ade2b746704cec4fa33210289b1b9aa2ced6ec3117229f4b881e0af17b07212a5661f8bb71f93535009bb13
- SSDEEP 192:hHVMfa7TTCjJSixzPSAA56RCK7Yu/VPgwmjU0JXBAQYfPq/3Kbam:h1Mf0gJSix2AA56RCiZVQ9GQYnq/6ba
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1692 2252 WerFault.exe 55
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1388-54-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:2252
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2252 -s 2402⤵
- Program crash
PID:1692
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 416 -p 2252 -ip 22521⤵PID:4408