Analysis
- max time kernel
136s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
25/08/2022, 12:10
Behavioral task
behavioral1
Sample
1476-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1476-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target 1476-54-0x0000000180000000-0x0000000180009000-memory.dll
- Size 36KB
- Sample220825-pb5vxadff4
- SHA256 fd75b86321e3ada7e309432dbee897d8856846741efbe93d11ffa8b2f4e06f6e
- MD5 0a0f69c593c7bdc60c9cab798cceaf22
- SHA1 fa276f166e738ef57785c122c1c389d4d5a120c1
- SHA512 bb147edde35d87ea9e1b12fe2e8bd4d3152a691cb566cc5470aea35283bb5e4af5970d132017774438a3be2dee8e79729b64624efeb404d635ffe2c0b1d52e8d
- SSDEEP 192:hHVMfa7TTCjJSixzPSAA56RCK7Yu/VPgwXudsXBAQYfPq/3Kb:h1Mf0gJSix2AA56RCiZVBhGQYnq/6b
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 396 2068 WerFault.exe 70
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1476-54-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:2068
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2068 -s 2442⤵
- Program crash
PID:396
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 468 -p 2068 -ip 20681⤵PID:4424