Analysis
- max time kernel
150s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
25/08/2022, 14:00
Behavioral task
behavioral1
Sample
1316-55-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1316-55-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
- Target 1316-55-0x0000000180000000-0x0000000180009000-memory.dll
- Size 36KB
- Sample220825-rbed3aeadk
- SHA256 8503ebfa5a5e765a3829d98bd00f3790e8322c6685aeabc66640399fbbea62af
- MD5 33ed0831ab873d6977271f63137ac294
- SHA1 0898bd485f9ed257960ebbc214a6ba34bdbb4a6c
- SHA512 510391951c0d8df0fe52308ba9f42b48cd5e88dcd9aee05588b39ef422d4e236c8557c2e83e32846b9d39f0c702741b4c68c5f09e7a8b4528e490e41be401d8b
- SSDEEP 192:hHVMfa7TTCjJSixzPSAA56RCK7Yu/VPgwviXBAQYfPq/3Kbw:h1Mf0gJSix2AA56RCiZV6GQYnq/6bw
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1696 564 WerFault.exe 30
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1316-55-0x0000000180000000-0x0000000180009000-memory.dll,#11⤵PID:564
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 564 -s 2442⤵
- Program crash
PID:1696
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 564 -ip 5641⤵PID:3560