d8c94e2ebd86ac981885fd5a9b5e679826113bf1f879ae8a04faa37dcd7e1cd9

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07/11/2022, 21:42

Target

d8c94e2ebd86ac981885fd5a9b5e679826113bf1f879ae8a04faa37dcd7e1cd9.dll
Size

232KB
MD5

6e285fd15ab2bb769f956f5f75cf1f4f
SHA1

c4ee73b4fd5187d7a3977783714f24bae0c6eb6f
SHA256

d8c94e2ebd86ac981885fd5a9b5e679826113bf1f879ae8a04faa37dcd7e1cd9
SHA512

82368af01dd2d58ead4048b2a80b295e9aa2d0c3e0f7e9c9b2b6aa0b5658f32e7668ebe0558d1a766cc48764a06da581cab07b21d6765a7643e90d5f3fabf59a
SSDEEP

6144:E6wKr3mCu8Rfcm8i4g/eRNp005vx4QX4D:EgfKrc

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4320	2008	WerFault.exe	80

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3464 wrote to memory of 2008	3464	rundll32.exe	80
PID 3464 wrote to memory of 2008	3464	rundll32.exe	80
PID 3464 wrote to memory of 2008	3464	rundll32.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d8c94e2ebd86ac981885fd5a9b5e679826113bf1f879ae8a04faa37dcd7e1cd9.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3464
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\d8c94e2ebd86ac981885fd5a9b5e679826113bf1f879ae8a04faa37dcd7e1cd9.dll,#1
  2⤵
  PID:2008
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2008 -s 644
    3⤵
    - Program crash
    PID:4320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2008 -ip 2008
1⤵
PID:1560

memory/2008-133-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/2008-134-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/2008-135-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/2008-136-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download