Analysis
-
max time kernel
17s -
max time network
35s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29/10/2022, 04:18
Static task
static1
Behavioral task
behavioral1
Sample
ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6.dll
Resource
win10v2004-20220812-en
General
-
Target
ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6.dll
-
Size
380KB
-
MD5
97846d3815dd4dbce109fbb4bc956d1b
-
SHA1
8cf15812b272a2a026970e723bf58702de5e6c66
-
SHA256
ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6
-
SHA512
75f6f935f8b1499e8e3935fa0e3c92303a43bfc5411e8f1c1fe2bb11a76e27f8955420d9ec016e97e011d091e856d7893482bac6c528023ce96cd9b59bb2e17b
-
SSDEEP
6144:zjzh/uDaV/GN5RvQXJHH08jl1xXzqjrL0lxdL6bIsYqo0h4AXJwoT0JdT7OBtoRC:PdmDEGNvQ5HH0UL1qjklxdL6bAFL0JhD
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4864 1668 WerFault.exe 20
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6.dll,#11⤵PID:4364
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6.dll,#12⤵PID:1668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1668 -s 5803⤵
- Program crash
PID:4864
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1668 -ip 16681⤵PID:4968