Analysis

  • max time kernel
    84s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-02-2023 14:25

General

  • Target

    python-3.11.2-amd64/pres/fr/docs/perf/MapRouter.dll

  • Size

    3.0MB

  • MD5

    ed462036b7ec9d6d9d668f0f51443319

  • SHA1

    1a0bc32ca9dd5b1451355e7733aecb330ece7a58

  • SHA256

    81f1badd9345f296ae34809bc745ca4dfcde1def0dfd317076d5340981b5fb94

  • SHA512

    b5f9efcab8686c439880af06d5b0d59da77b7f1fba72bdd97b5645b6bd0761ec069bbaf0d581837c939b7ce5765728210130d6c91c511be61b94267352f5c589

  • SSDEEP

    49152:ZsffgkQDokXgBtPrrI8+yna8hSWvy9N4m7Zgygb22Bdxs63mkdV2z4ju7GKARnPM:VtwWzJ2BHtvn6Z

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\python-3.11.2-amd64\pres\fr\docs\perf\MapRouter.dll,#1
    1⤵
      PID:4148
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 4148 -s 388
        2⤵
        • Program crash
        PID:1888
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 360 -p 4148 -ip 4148
      1⤵
        PID:2116

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads