c74873d7b8cc622379ed49bd0b0e477167ae176aa329b01338666ec4c1a4426b | Triage

Resubmissions

03-11-2022 09:46

221103-lrnd1sghc5 3

22-09-2022 15:06

220922-sgtavafedj 3

14-10-2021 16:48

211014-vbeavaaad5 8

22-09-2021 05:58

210922-gpdpksecgk 8

22-09-2021 05:36

210922-gax5nsecdn 8

Analysis

max time kernel
252s
max time network
176s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03-11-2022 09:46

Sharing

Report Analysis Logs

General

Target

manual64.dll
Size

184KB
MD5

d35a5caf8af43432ec2f5a2318b20597
SHA1

8fd8f62a848a1d9c1ff18c7bc16e8a6d2c67c37e
SHA256

c74873d7b8cc622379ed49bd0b0e477167ae176aa329b01338666ec4c1a4426b
SHA512

7de9c021c2e64c564ba8ac5c0f1914718c240a382bc717dd7e93122a0a51c849c263ae0438eae5c324ca1e5c3d346c2a09ab7fc63bbaa598e3973943a5d84263
SSDEEP

3072:y3hqOnUKeCBHq5l2GI3NamwWkh2gaER+680q2t1X7LrruiBHta:JYj1iaNamwWk08U68qw

Score

3^/10

Malware Config

Signatures

Program crash 2 IoCs

Processes:

WerFault.exeWerFault.exe

pid pid_target process target process

3716 4692 WerFault.exe rundll32.exe
4268 852 WerFault.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\manual64.dll,#1
1⤵
PID:4692

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4692 -s 224
2⤵
- Program crash
PID:3716

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 424 -p 4692 -ip 4692
1⤵
PID:3328

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 528 -p 852 -ip 852
1⤵
PID:2180

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 852 -s 772
1⤵
- Program crash
PID:4268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...