2b379f9fd440fb0e6d5e6dc6f65c4fbf17d31840add7f182ceec78514cedd94a | Triage

Analysis

max time kernel
60s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27-10-2022 15:52

Sharing

Report Analysis Logs

General

Target

lXNqexIxTwBWAS.dll
Size

1.9MB
MD5

9defcff2b09c7d842d70c5dbf1614c4b
SHA1

07725122a95bd5ea5b9136b9a6363ecdff4a8a49
SHA256

1df0e65db9d41ebd6941aacbadeb935933b3e5ee2805eb89d340d097ac83285c
SHA512

fd679395efc4030cdff339526355c3c962e0fd21b37f9f5d1ac29be29970c564b9b28105c1437ee67d0f508f0b557eb7c4b471c9a63d6149a330d5b9ab8794a1
SSDEEP

49152:0WMIqdgaiFBRzI9sXUd9BqiIirDxLCll+HaVD7RNPb:YIqdiOwQjIiIH+HaVRND

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4640	1244	WerFault.exe	56

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\lXNqexIxTwBWAS.dll,#1
1⤵
PID:1244
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1244 -s 328
  2⤵
  - Program crash
  PID:4640

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 360 -p 1244 -ip 1244
1⤵
PID:3196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads