527fbfad3a7393d22732e5a3f845939fd576cd09e958b97b84368dcf6020bf29 | Triage

Analysis

max time kernel
153s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
08-12-2022 09:54

Sharing

Report Analysis Logs

General

Target

startles/racially.dll
Size

209KB
MD5

9f6d522e1351f27caa9f79bc6782d197
SHA1

3d41e5d1d10b68ca2b6bfc0ba2e112433caa539e
SHA256

56fc9355e731581623fbfcb507be348e51c65f6afb2ac6e6f44764f7e2693cec
SHA512

6cbb8e603c5c26df5dfd032e2c1c3e784b3fd5fb79628980e41ae798ef78546f857932674b86f6e1bd0461927f46af3accd3a0fb817c033c049e3141ce8489ae
SSDEEP

6144:a7N2DFx/kYWK4XDfAW22//+777777Lw9oHMAqLTJF3u8:a5O//3777777LwmqL9F3u8

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3100 3576 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\startles\racially.dll,#1
1⤵
PID:3576

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3576 -s 328
2⤵
- Program crash
PID:3100

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 432 -p 3576 -ip 3576
1⤵
PID:4992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...