421b71ac924938e9b47291f38233d9e4b8116c1f4ec8db523d229535c8c12212

Resubmissions

10-11-2022 09:03

17-10-2022 17:51

max time kernel
38s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
10-11-2022 09:03

Target

421b71ac924938e9b47291f38233d9e4b8116c1f4ec8db523d229535c8c12212.dll
Size

665KB
MD5

01f0836fe176750d2163e36177e581b4
SHA1

c6cb7ec82ee55ccb56a4cc8b91c64e9b4f4e14da
SHA256

421b71ac924938e9b47291f38233d9e4b8116c1f4ec8db523d229535c8c12212
SHA512

81aa866692c6220db40ed95b4efaf7613f10d932913120995156c4bca36d0ba32055826a7289fec0eb0e5c40fb22ee56a0fb3fc32d56f649610d8828450a6497
SSDEEP

12288:1qeDSdwfsttoz8nW2+VQz8WOoOPYgq7iUVs3lVXG8Lp:1qISIsttoqW2+VQzHO9YDjS1VXNp

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2000 1968 WerFault.exe regsvr32.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

regsvr32.exe

pid process

1968 regsvr32.exe

pid	pid_target	process	target process
2000	1968	WerFault.exe	regsvr32.exe

pid	process
1968	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\421b71ac924938e9b47291f38233d9e4b8116c1f4ec8db523d229535c8c12212.dll
1⤵
- Suspicious use of SetWindowsHookEx
PID:1968

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1968 -s 216
2⤵
- Program crash
PID:2000

memory/1968-54-0x000007FEFBE81000-0x000007FEFBE83000-memory.dmp

Filesize
8KB

Download