Analysis
-
max time kernel
77s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2022 15:00
Static task
static1
Behavioral task
behavioral1
Sample
Details.lnk
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Details.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
XLojGEhKNSWWGb.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
XLojGEhKNSWWGb.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
uOAxPaiprCVzvn.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
uOAxPaiprCVzvn.dll
Resource
win10v2004-20220812-en
General
-
Target
uOAxPaiprCVzvn.dll
-
Size
3.6MB
-
MD5
60658cdb2f273a1a9c18ee8ff5118112
-
SHA1
d4665150bec840c6e8be62c2c6cdebc42ef5ea19
-
SHA256
ded7c0c21ca7f16e70ed2b1a774bab54019d6b3fb865677eba254edeafd7b91e
-
SHA512
05989c1aefce87569dfe31de09507ec965123e8b776db237c8c974cebe8c5c275858ccfbcec3124e5fc0450442afac0d2a08cee3919ac9bc68e19c06128c46e6
-
SSDEEP
24576:Q4kkbEgHWUYr/Ql/V6+Zr0dyFMftqscMOdIYro8u6c4KCtrw9:QhkbEg29sl6O
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1848 2816 WerFault.exe 75
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\uOAxPaiprCVzvn.dll,#11⤵PID:2816
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2816 -s 3282⤵
- Program crash
PID:1848
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 2816 -ip 28161⤵PID:4196