Analysis
- max time kernel
148s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
23/08/2022, 16:52
Behavioral task
behavioral1
Sample
1612-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1612-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target 1612-54-0x0000000180000000-0x0000000180009000-memory.dll
- Size 36KB
- Sample220823-vdv2daggcj
- SHA256 c584a839d67f5a92258c73bfc2ba8633458d1b4edcf2b4cfa2b0cb7a9ae3be2a
- MD5 9c41dda2d30ddbba2b258c48d7d081fc
- SHA1 5a186f6ebe0667ca7fa23c6eb2d6bdc613d72f26
- SHA512 3b4900b7e3d94b1495ab90cffd26e20ae5f6500b3841850a2f0333f3d944eb70f6a1c90abca9754a80681f2061c3c02264e908cbcf0ea4fd2932a3e5a20e9433
- SSDEEP 192:hHVMfa7TTCjJSixzPSAA56RCK7Yu/VPgwx5b2XBAQYfPq/3Kbam:h1Mf0gJSix2AA56RCiZVZQGQYnq/6ba
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4696 1952 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1612-54-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:1952
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1952 -s 2402⤵
- Program crash
PID:4696
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 412 -p 1952 -ip 19521⤵PID:1124