Analysis
-
max time kernel
91s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
31-01-2023 15:49
Behavioral task
behavioral1
Sample
900-132-0x0000000002D10000-0x0000000002D15000-memory.dll
Resource
win7-20221111-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
900-132-0x0000000002D10000-0x0000000002D15000-memory.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
900-132-0x0000000002D10000-0x0000000002D15000-memory.dll
-
Size
20KB
-
MD5
3c9d2085dbd16585d59502f40de8955f
-
SHA1
ba4a81e2187b7d92663398ce1ec6d36bb5a80ea9
-
SHA256
7fb5792c2f63f077ca1e59cf5cfc5f6f336f1301a27705cc9bc3deccec225527
-
SHA512
e962f5b8f88cc45b5cf09f0da8d8248455dcf25e17ac12f5b56720535c2a2eeebe6f14f7b52b53ab9923667298cf40aedc4955ec871492e710335ebdc8eb8162
-
SSDEEP
96:SYyMOrMXZov7OhJ6w7Cu0Er5spIx5jfFP1c4f31VjYPjScm1:vjOrMX2jQAm7RxFNP+m31VjA291
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4720 832 WerFault.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\900-132-0x0000000002D10000-0x0000000002D15000-memory.dll,#11⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 832 -s 2242⤵
- Program crash
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 832 -ip 8321⤵