Analysis

  • max time kernel
    17s
  • max time network
    35s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 04:18

General

  • Target

    ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6.dll

  • Size

    380KB

  • MD5

    97846d3815dd4dbce109fbb4bc956d1b

  • SHA1

    8cf15812b272a2a026970e723bf58702de5e6c66

  • SHA256

    ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6

  • SHA512

    75f6f935f8b1499e8e3935fa0e3c92303a43bfc5411e8f1c1fe2bb11a76e27f8955420d9ec016e97e011d091e856d7893482bac6c528023ce96cd9b59bb2e17b

  • SSDEEP

    6144:zjzh/uDaV/GN5RvQXJHH08jl1xXzqjrL0lxdL6bIsYqo0h4AXJwoT0JdT7OBtoRC:PdmDEGNvQ5HH0UL1qjklxdL6bAFL0JhD

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6.dll,#1
    1⤵
      PID:4364
      • C:\Windows\SysWOW64\rundll32.exe
        rundll32.exe C:\Users\Admin\AppData\Local\Temp\ec25c36eba97ca0025746f4a5f0c72c50827c9b2baba3460dd1ea85baa6806f6.dll,#1
        2⤵
          PID:1668
          • C:\Windows\SysWOW64\WerFault.exe
            C:\Windows\SysWOW64\WerFault.exe -u -p 1668 -s 580
            3⤵
            • Program crash
            PID:4864
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1668 -ip 1668
        1⤵
          PID:4968

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads