a0ffd4b7147b329eb9f1a876cd6fc043be19002503f2734faffe1dbf9c6cd034 | Triage

Analysis

max time kernel
89s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
13-12-2022 00:56

Sharing

Report Analysis Logs

General

Target

SteamOverlay64.dll
Size

96KB
MD5

549eb651023fa847d2212bebe29c6f9e
SHA1

f70fbe8f46cbd90c185eac2a2df843e2c3405a8f
SHA256

9edeba9df599d65fb378d4bcbe16e9ac2ea3b7850491e662e8ddaf6f1d74849e
SHA512

9e249b8d589c52857362b0611c265c21d1f715749e6b7a75e112d28aec89975655a8ef62ad1de812fadd39a48f0e01cc8eef9e33bbb5e30da827020c77247c68
SSDEEP

3072:YV/XjVTzI4OC9cFnlHB6innA2ezcqSn4ueM+GLSD:iTi4OUc7Kt

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3356	4992	WerFault.exe	64

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SteamOverlay64.dll,#1
1⤵
PID:4992
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4992 -s 252
  2⤵
  - Program crash
  PID:3356

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 204 -p 4992 -ip 4992
1⤵
PID:424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads