596f9f22e3749d4b6b70848eea06ca8506c62480ecae1900408d696f0f8e4c72 | Triage

Analysis

max time kernel
504s
max time network
510s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
20-01-2023 23:37

Sharing

Report Analysis Logs

General

Target

swscale-5.dll
Size

543KB
MD5

9866b1f57b4ce7f89972c6ce094987da
SHA1

b21d58c54dfe057115a9220ea84503507301de7d
SHA256

b84b04b246f71e094ad725a7799f34f91ce14e66baa0411e1b285b6a8d9f4b01
SHA512

90d8278fc6d7779cefe2a3ab2e1de80a3a70d15dd8a748c43d864d1dc96c3246b9efb8c221eea73d6a2c598277cb9276b97a7c1aa43b68f3d812136f11ee3dfd
SSDEEP

12288:1BiKK0mmiczyrgMYDMTeEhkoOwwApAU06aPpTZURezZEH:1sKK0mmwwAp10bpTZURezZE

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2460 2540 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\swscale-5.dll,#1
1⤵
PID:2540

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2540 -s 360
2⤵
- Program crash
PID:2460

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 360 -p 2540 -ip 2540
1⤵
PID:1584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...