Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25/11/2022, 21:56
Static task
static1
Behavioral task
behavioral1
Sample
d5a0734f75bc228d7a6de490e35d4ae9ff320c9025b8bb3af000a065430bf3ef.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d5a0734f75bc228d7a6de490e35d4ae9ff320c9025b8bb3af000a065430bf3ef.dll
Resource
win10v2004-20220812-en
General
-
Target
d5a0734f75bc228d7a6de490e35d4ae9ff320c9025b8bb3af000a065430bf3ef.dll
-
Size
344KB
-
MD5
fcd07068c98fdc02403f0612c688ebb5
-
SHA1
e34ab27d02883961dc660288e5d6b85460c6071f
-
SHA256
d5a0734f75bc228d7a6de490e35d4ae9ff320c9025b8bb3af000a065430bf3ef
-
SHA512
608f6c559be0f414b4a43f5cdd8a02bb25b3c3d6c68b32b621aca6d915cc0ae837c715ad1b7d7d469d48d17754ebd9a3bf8e3be31d5a9b2bd64b30fa4c598d60
-
SSDEEP
6144:8OLzRNi1buFWoGI/23PUvCXCMAn9QVUH4132vFjcx4X:g9uFWO+38viCvH413X
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4984 2372 WerFault.exe 77
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d5a0734f75bc228d7a6de490e35d4ae9ff320c9025b8bb3af000a065430bf3ef.dll,#11⤵PID:2372
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2372 -s 3642⤵
- Program crash
PID:4984
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 376 -p 2372 -ip 23721⤵PID:2844