Analysis
-
max time kernel
57s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/01/2023, 09:10
Static task
static1
Behavioral task
behavioral1
Sample
Vegas Pro 19/PATCH/protein/Protein_x64.5.0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Vegas Pro 19/PATCH/protein/Protein_x64.5.0.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Vegas Pro 19/PATCH/vegas190.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Vegas Pro 19/PATCH/vegas190.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
Vegas Pro 19/VEGAS_Pro_19.0.0.341.exe
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
Vegas Pro 19/VEGAS_Pro_19.0.0.341.exe
Resource
win10v2004-20221111-en
General
-
Target
Vegas Pro 19/PATCH/protein/Protein_x64.5.0.dll
-
Size
60KB
-
MD5
9c4d4aeed720e4981dd263d570da7e8e
-
SHA1
287151e3018ea44cf1712422c8e3be2b352632f2
-
SHA256
80243fe0f5ebe22e8fb7770c0cda6e48b9cd7978adf9140bd6bc7f3f9091760c
-
SHA512
dad1ca7f2740904ffc9fdb582dbcdfcdc18f23eb4f045e99875fb32bc6d4e02fc67da5562b3ee2bd0361820bd2de020b039877bc521a42d42b3091e19ba71202
-
SSDEEP
1536:qU68qk9n9cFcVVcfokr59HldDCAfEhAxjj:qJfkwFcbMDzxX
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1088 2148 WerFault.exe 72
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Vegas Pro 19\PATCH\protein\Protein_x64.5.0.dll",#11⤵PID:2148
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2148 -s 4682⤵
- Program crash
PID:1088
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 188 -p 2148 -ip 21481⤵PID:2304