Analysis
-
max time kernel
94s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01-11-2022 21:42
Static task
static1
Behavioral task
behavioral1
Sample
BOiQKiECaUzWqF.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
BOiQKiECaUzWqF.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
eLWCBMEWwlzsBt.bat
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
eLWCBMEWwlzsBt.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
required info.lnk
Resource
win7-20220812-en
General
-
Target
BOiQKiECaUzWqF.dll
-
Size
885KB
-
MD5
df097341b231b1f68d9447a8a36f367b
-
SHA1
ef1bf0b295ff089febb3e4362d7c0d46431de842
-
SHA256
9bb35cecb773eb4a9545820b8328ccebc07843ec2cdfa60f2a1f78c90489d5b1
-
SHA512
a13dab104405ed2305b14a9b79eacbbcca66f98147841c2696bf1cea2849664c033f082f355380f4b245111283697219e1dfd0ce42f6919e27197c488e824714
-
SSDEEP
24576:aLqITcNf0GMRydz8bUdO9Uf4fj80xAwpncebwRbc:YqIghyYzmWyFFp1w
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4480 2400 WerFault.exe 73
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\BOiQKiECaUzWqF.dll,#11⤵PID:2400
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2400 -s 3282⤵
- Program crash
PID:4480
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 360 -p 2400 -ip 24001⤵PID:4836