Analysis

  • max time kernel
    108s
  • max time network
    177s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    15-01-2023 23:47

General

  • Target

    FrostyHash.dll

  • Size

    112KB

  • MD5

    40cbe0c1dd81f6d6b4353623d4eb0200

  • SHA1

    21c4f7af6a0b7f8dffbaca79ceb015e6113a08df

  • SHA256

    8a2f9074bdf2e97cc4934c92c995a1adc431332a86d820251c8c2a9190aed7ea

  • SHA512

    351266b00856bf504b5b5c3bd9c80b9eec69f1c060e61f99af9b15e8d8b6970f911d94f559e170260922592ae27d7fda4f6e06cd25cd6a3f4e7b4fce21a0d5be

  • SSDEEP

    1536:B0snDClNp4ESiqZH6FFin0ndx9DDadTl:BOnlJqJwndx9D0Tl

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\FrostyHash.dll,#1
    1⤵
      PID:4780
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 460 -p 3988 -ip 3988
      1⤵
        PID:3932
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 3988 -s 1776
        1⤵
        • Program crash
        PID:5032

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads