Analysis
-
max time kernel
137s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01-09-2022 17:31
Behavioral task
behavioral1
Sample
bumble_0109.dll
Resource
win7-20220901-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
bumble_0109.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
bumble_0109.dll
-
Size
1.1MB
-
MD5
0d7741358483574dde864c7b1e4b2a77
-
SHA1
2a3327889c1b0812d43b669143c532d65b0b847a
-
SHA256
29fc401b9488bea68571f46be82e3576e027504233b2a32111e634eb3c943b55
-
SHA512
500d9a5fcb87da0e7c84c067d30662dcce0dd8402c2d98443ce2d300946b3a7cabd89f84ef9c77d087bf6c1930a0ccb0e5effee2d339448987797cef7dfdf699
-
SSDEEP
24576:6x2ubccfCEN1Wpv9hOQn7G9Zx/tGggFQhrxtxbdAeow:aTCyWN9QQnq9Zx/ZgShrxt/Aeo
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5096 4568 WerFault.exe 48
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\bumble_0109.dll,#11⤵PID:4568
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4568 -s 4442⤵
- Program crash
PID:5096
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 184 -p 4568 -ip 45681⤵PID:5004