b76ba3d165ad8317f3020420db458edbe9165a99e726527a151d39019c533711 | Triage

Analysis

max time kernel
143s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19-01-2023 16:10

Sharing

Report Analysis Logs

General

Target

20220119_TA580/project/_queue.dll
Size

29KB
MD5

8eabd51d536276f3b3257ee975e50bfc
SHA1

1a13f707b29b895647a7de254031a6c80eb2cb7a
SHA256

24c23d04d274a4c1234f1a1a35b1805e1f17f99968f8baeec0c3b5295f05608a
SHA512

cfa027a1e01204078ccab3c2e1910e5806e0294d3ff0225d4713ea3b16cf07589005a0cc342688c3bb0bb6aa31b5401760c3890d46b39038b046072ad7b02b81
SSDEEP

768:Lez/DFB6r3GkrAIe5I47UYYiSyvN0PxWEZokD:LeDK3GkrAIe5I47UY7SyWPxnD

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3000 812 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\20220119_TA580\project\_queue.dll,#1
1⤵
PID:812

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 812 -s 356
2⤵
- Program crash
PID:3000

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 372 -p 812 -ip 812
1⤵
PID:4384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...