4aeff5a6879a17784d3765643eec3fc70efc6cbbeb469de29cda8f9b9d3a8138 | Triage

Analysis

max time kernel
144s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
08-12-2022 14:49

Sharing

Report Analysis Logs

General

Target

developer/nevertheless.dll
Size

209KB
MD5

bc47f431d704a935bdd20d65aceab8df
SHA1

9729b10dde412058d36636a7522996651aaabe9f
SHA256

4125a812e9d57cce27ab819705a96634ec91ce23cf7dc2c36e82ba15ec4fe184
SHA512

96c49bd4204c7501ddc08cc39d0a7930636d22a435501fefa8d8de89a70a568ae74e76afe3575464812555f7ef8f77c31e87cb477cf4cf47a38620b453e84f59
SSDEEP

6144:s7N2DFx/kYWK4XDfAW2C//+777777Lw9oHMAqLa8F3u8:s5O//r777777LwmqLbF3u8

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1876 1104 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\developer\nevertheless.dll,#1
1⤵
PID:1104

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1104 -s 328
2⤵
- Program crash
PID:1876

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 460 -p 1104 -ip 1104
1⤵
PID:1816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...