0782985a718d77165d3f6164ca4de366a3f7404f9fa0416b0c6e5e3270c45a8f | Triage

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2022 02:50

Sharing

Report Analysis Logs

General

Target

UMDF/hidscanner.dll
Size

96KB
MD5

c5511e1e7bf2038f5b2b7bf33904b13c
SHA1

7f7c41704b0da549bdfff5528c8839b9f83396f8
SHA256

86bd5ad16d9d58dd225160f7646ae110e5eb8c45e17d4fdafe73599dc0a63607
SHA512

a0fc8b4cc3bba5e45364c95f93d5dbcf3c0891cbac7961d7879453cc7f397e0bdb73c09502c30d5b87e81b9ddb19bfae1075a73fb9230186771e8d1e3b9955bc
SSDEEP

1536:XMAE7BTiYV7gnP7F4kYBNGP3JNohBx4wBDdB++XNoZH:6yJ4rGPJihBrjBtXu5

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4480	2400	WerFault.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\UMDF\hidscanner.dll,#1
1⤵
PID:2400
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2400 -s 336
  2⤵
  - Program crash
  PID:4480

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 464 -p 2400 -ip 2400
1⤵
PID:4836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads