b76ba3d165ad8317f3020420db458edbe9165a99e726527a151d39019c533711

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
19-01-2023 16:10

Target

20220119_TA580/project/_bz2.dll
Size

81KB
MD5

23dce6cd4be213f8374bf52e67a15c91
SHA1

dfc1139d702475904326cb60699fec09de645009
SHA256

190ade9f09be287fcc5328a6a497921f164c5c67e6d4fcdcb8b8fd6853b06fe2
SHA512

c3983e2af9333a8538f68f7048b83c1bb32219c13adac26fd1036c3dc54394a3e2c1e4c0219232badd8e2c95418019b9b22906bdb23a19601447573a93c038a0
SSDEEP

1536:LsRz7qldca26V6bw3haLRFcja8Ed7jjWHCFI4tV87SyzPxA:YRzGgohaQ9Ed7jjWiFI4tV81xA

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2404 636 WerFault.exe rundll32.exe

pid	pid_target	process	target process
2404	636	WerFault.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\20220119_TA580\project\_bz2.dll,#1
1⤵
PID:636

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 636 -s 364
2⤵
- Program crash
PID:2404

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 444 -p 636 -ip 636
1⤵
PID:4012