Analysis
-
max time kernel
17s -
max time network
35s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
30-12-2022 02:47
General
-
Target
publish/bin/libbz2-1.dll
-
Size
72KB
-
MD5
ab0e3427ea209d61ab6b08617c99b47c
-
SHA1
65002276e4e14ac067c78cd9fac498454fca2c02
-
SHA256
cde82b78524ba83ba94743417883e03e3311713ac0af87b50f5bc0335c5b77b6
-
SHA512
e45585c7945e30b8a3095e756652c0ab98367196d82f54d4384438bcad5b62b22b66a5f4f9ba246117cdd0d69b466aceb27873d7b44d55902e27cbebe898d016
-
SSDEEP
768:4Vf3UyszRfpZwMVKC2AfFBqs65nZNcF3kFOh9Q8y4mWaIN23AVrQPxx5Ttx:euRfpCMVKBAfO5nQF3uyez4mVQ84ex
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\publish\bin\libbz2-1.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 820 -s 842⤵
- Program crash
-