Analysis
-
max time kernel
100s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20-09-2022 18:29
Static task
static1
Behavioral task
behavioral1
Sample
Details.lnk
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Details.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
XLojGEhKNSWWGb.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
XLojGEhKNSWWGb.bat
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
uOAxPaiprCVzvn.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
uOAxPaiprCVzvn.dll
Resource
win10v2004-20220812-en
General
-
Target
uOAxPaiprCVzvn.dll
-
Size
3.6MB
-
MD5
60658cdb2f273a1a9c18ee8ff5118112
-
SHA1
d4665150bec840c6e8be62c2c6cdebc42ef5ea19
-
SHA256
ded7c0c21ca7f16e70ed2b1a774bab54019d6b3fb865677eba254edeafd7b91e
-
SHA512
05989c1aefce87569dfe31de09507ec965123e8b776db237c8c974cebe8c5c275858ccfbcec3124e5fc0450442afac0d2a08cee3919ac9bc68e19c06128c46e6
-
SSDEEP
24576:Q4kkbEgHWUYr/Ql/V6+Zr0dyFMftqscMOdIYro8u6c4KCtrw9:QhkbEg29sl6O
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4940 5076 WerFault.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\uOAxPaiprCVzvn.dll,#11⤵PID:5076
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 5076 -s 3362⤵
- Program crash
PID:4940
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 384 -p 5076 -ip 50761⤵PID:1184