Analysis
- max time kernel
139s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
25/08/2022, 11:15
Behavioral task
behavioral1
Sample
2352-146-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2352-146-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target 2352-146-0x0000000180000000-0x0000000180009000-memory.dll
- Size 36KB
- Sample220825-nc1f5scbap
- SHA256 12f97da4b1c52d229446fca28018e24a27b03712b18843874ece5e1b6db247c3
- MD5 2fabc309c9f2f7789f78d2022b0acc7d
- SHA1 4ccf51be65e2764eb6ef5417025346fbfaa6df20
- SHA512 57dc0b906e9ede0da6969d0ed1b428a41a9a5984fcbdcc0fde927e01c1cfb192af82dbd10d5f415244b0d595b4a05a1a3a362880e46dea04d1fd975401e13655
- SSDEEP 192:hHVMfa7TTCjJSixzPSAA56RCK7Yu/VPgwZ///wTXBAQYfPq/3Kb:h1Mf0gJSix2AA56RCiZVbY7GQYnq/6b
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1356 2816 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2352-146-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:2816
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2816 -s 2442⤵
- Program crash
PID:1356
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 464 -p 2816 -ip 28161⤵PID:1644