Analysis
- max time kernel
14s - max time network
17s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
23/08/2022, 16:55
Behavioral task
behavioral1
Sample
1708-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1708-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target 1708-54-0x0000000180000000-0x0000000180009000-memory.dll
- Size 36KB
- Sample220823-vfj2wsaac3
- SHA256 08a43164c4effc815bf2d61d0a6bd37760f550c720bf999005e8d41ceb41c0bb
- MD5 08aabe73b24515e62f93a37342718166
- SHA1 1235e1380df5d84b4cf60b68a5cdeebc25491560
- SHA512 bf57747722605987f60f4691b42f72d2b975d774efae07568b2e33069ff13a0d9cd5fa4d668fbca79392b224397d235abc9f2367eb30b3bab5fe418fb9eadc42
- SSDEEP 192:hHVMfa7TTCjJSixzPSAA56RCK7Yu/VPgwf2mXBAQYfPq/3Kbam:h1Mf0gJSix2AA56RCiZVdnGQYnq/6ba
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2864 1348 WerFault.exe 75
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1708-54-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:1348
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1348 -s 2402⤵
- Program crash
PID:2864
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 404 -p 1348 -ip 13481⤵PID:4744