Analysis
-
max time kernel
90s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
09-01-2023 22:26
Behavioral task
behavioral1
Sample
3081c8b9af41c7f340551781cd6484e442b815db0539d749e7af09183a95efd2.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3081c8b9af41c7f340551781cd6484e442b815db0539d749e7af09183a95efd2.dll
Resource
win10v2004-20221111-en
General
-
Target
3081c8b9af41c7f340551781cd6484e442b815db0539d749e7af09183a95efd2.dll
-
Size
36KB
-
MD5
8d14a834aa36163d0f57558a20187a64
-
SHA1
4441d9e025448cde2a405e4d217a58720161ddee
-
SHA256
3081c8b9af41c7f340551781cd6484e442b815db0539d749e7af09183a95efd2
-
SHA512
008920bddf62b1eafdbc5a4fcfb437b1d48ea1ab65b7f7643c54ce91d477fc82dcf4e9685a690316df6fa47d0a002d78badafbef85cc2dd0ad55bf57f41478af
-
SSDEEP
192:6P+nM5KC/zxayGc3gzq7YjDaqzJCueT+RfbZne9s6PL2P0tkYGijYW:s5Jxayczq7Yjt9lfle9s6PLO6kYGi8W
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4040 3488 WerFault.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3081c8b9af41c7f340551781cd6484e442b815db0539d749e7af09183a95efd2.dll,#11⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3488 -s 2402⤵
- Program crash
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 3488 -ip 34881⤵