Analysis
-
max time kernel
176s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2022, 01:30
Static task
static1
Behavioral task
behavioral1
Sample
ea0ac8d60aefb5e7c08a31aabe35881a5f42f98a14d3c9f4a188b7ef046c3189.dll
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ea0ac8d60aefb5e7c08a31aabe35881a5f42f98a14d3c9f4a188b7ef046c3189.dll
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
ea0ac8d60aefb5e7c08a31aabe35881a5f42f98a14d3c9f4a188b7ef046c3189.dll
-
Size
501KB
-
MD5
74181b3c71820b70df65ba1bf7827fa0
-
SHA1
6aaa0f3b3a7eda70fde8e22af949d46dff63b5a8
-
SHA256
ea0ac8d60aefb5e7c08a31aabe35881a5f42f98a14d3c9f4a188b7ef046c3189
-
SHA512
732ab29821ee5f8af1e0546ad95057a4e66c7a2614af3c23bdb0c4b46577612194222d13697fbf22fc2369e8a392f31026d1e0e8532b424841a0bb93492a43bc
-
SSDEEP
12288:JLrgV2bhQxaZRQ1kJASqNQ7H/KL34ZOfJWWN:tA2b2oZkkJAJu7fYJ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2888 2876 WerFault.exe 47
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ea0ac8d60aefb5e7c08a31aabe35881a5f42f98a14d3c9f4a188b7ef046c3189.dll,#11⤵PID:2876
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2876 -s 3482⤵
- Program crash
PID:2888
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 420 -p 2876 -ip 28761⤵PID:1456