Analysis
-
max time kernel
146s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02-09-2022 06:39
Behavioral task
behavioral1
Sample
1784-55-0x00000000024A0000-0x00000000025B6000-memory.dll
Resource
win7-20220812-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1784-55-0x00000000024A0000-0x00000000025B6000-memory.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
1784-55-0x00000000024A0000-0x00000000025B6000-memory.dll
-
Size
1.1MB
-
MD5
542849cee8442af7388fa7deb69db073
-
SHA1
52178e344d5f219e935563f8456b8d77c320c220
-
SHA256
b02a87e7e63b3810fa94f030eea983a36dc13c37257811cd55921933ce6d9b5a
-
SHA512
62a36d530132ac920d25b33021e2533f9a6e9e67f1a22119be7301c700a14e82ea9edb79ce81c59cce7b4e554b1a21dc3e7d8af889f5880489db33fb8f757f85
-
SSDEEP
24576:VQqAVjXz0zErzWQsBSW+HOfK8ex9o2gEHgQPe3/J:Dw+ZBrzKFx9o2gQxK
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1392 4504 WerFault.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1784-55-0x00000000024A0000-0x00000000025B6000-memory.dll,#11⤵PID:4504
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4504 -s 2482⤵
- Program crash
PID:1392
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4504 -ip 45041⤵PID:2260