b58a31d34c5014ac5f41d7ecd5a741139595ae6d05ac850a41314ff03260e4c0

Analysis

max time kernel
88s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
12-12-2022 09:01

Target

iced/askgothogtan/forbidding.dll
Size

374KB
MD5

6242b580541d24a300b10998f33af74f
SHA1

091b8d919aa4d340c4872ad97488eeb7866175e6
SHA256

88b2a39578b88e560fd05ec2fcd971cf63e4fbeb229026ad5c0dc3bce17ea549
SHA512

c1ee8be83d598277d7db31e9aad0318e710e73c5a89a61fc7554e79470ff8fab637954038a4817e5da188be20741bab2c6302c1c1df97df90c5c5b36d4913d13
SSDEEP

6144:00FOhm3Y1LfpDqnkIBwcu/oDdzr88vAHL/l7ysDPXoPcTPinEgrTytlRNKIg8ggd:00km3YYY/ohhvAHLoWPXoPcTPbgrmtlR

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2436 4664 WerFault.exe rundll32.exe

pid	pid_target	process	target process
2436	4664	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\iced\askgothogtan\forbidding.dll,#1
1⤵
PID:4664
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4664 -s 332
  2⤵
  - Program crash
  PID:2436

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4664 -ip 4664
1⤵
PID:3760