Analysis
-
max time kernel
91s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
11-02-2023 13:11
Static task
static1
Behavioral task
behavioral1
Sample
bios.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bios.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
project information.lnk
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
project information.lnk
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
topicsMain.bat
Resource
win7-20220812-en
General
-
Target
bios.dll
-
Size
1.1MB
-
MD5
ce2c902fd0ce18854cdb470b1a02d430
-
SHA1
8c1ab975f7c6aefc03eb9809fc3b352ce2d92c02
-
SHA256
ea3a26bb3e6dd0aef0685ce38aeac6fcd9f4b3ee8380d93cc6a63330c5afbfd8
-
SHA512
9d3ac80a152ef0d8fa8461013eff9faf3432e652f4292c0cfd427f92e14d8ed67507a4b2f0596050a7997af872324fdd1057da6d7bf4ab0daed4ed3616eacdcf
-
SSDEEP
12288:78xoBeGLj79ko/Kw5D/4u5VhB6FXW8oI4pojoUVPn3mR7QJjmLB2HwjsjJlH0Ycn:Ix0lL5/KsDZBWG8UUVPn2u3HFjJ20
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4992 4512 WerFault.exe 47
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\bios.dll,#11⤵PID:4512
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4512 -s 3282⤵
- Program crash
PID:4992
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4512 -ip 45121⤵PID:5072