Resubmissions
03/11/2022, 09:46
221103-lrnd1sghc5 322/09/2022, 15:06
220922-sgtavafedj 314/10/2021, 16:48
211014-vbeavaaad5 822/09/2021, 05:58
210922-gpdpksecgk 822/09/2021, 05:36
210922-gax5nsecdn 8Analysis
-
max time kernel
252s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/11/2022, 09:46
Static task
static1
Behavioral task
behavioral1
Sample
manual64.dll
Resource
win10v2004-20220812-en
1 signatures
300 seconds
General
-
Target
manual64.dll
-
Size
184KB
-
MD5
d35a5caf8af43432ec2f5a2318b20597
-
SHA1
8fd8f62a848a1d9c1ff18c7bc16e8a6d2c67c37e
-
SHA256
c74873d7b8cc622379ed49bd0b0e477167ae176aa329b01338666ec4c1a4426b
-
SHA512
7de9c021c2e64c564ba8ac5c0f1914718c240a382bc717dd7e93122a0a51c849c263ae0438eae5c324ca1e5c3d346c2a09ab7fc63bbaa598e3973943a5d84263
-
SSDEEP
3072:y3hqOnUKeCBHq5l2GI3NamwWkh2gaER+680q2t1X7LrruiBHta:JYj1iaNamwWk08U68qw
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3716 4692 WerFault.exe 56 4268 852 WerFault.exe 86
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\manual64.dll,#11⤵PID:4692
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4692 -s 2242⤵
- Program crash
PID:3716
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 424 -p 4692 -ip 46921⤵PID:3328
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 528 -p 852 -ip 8521⤵PID:2180
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 852 -s 7721⤵
- Program crash
PID:4268