Analysis
-
max time kernel
103s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
21-02-2023 07:56
Static task
static1
Behavioral task
behavioral1
Sample
data/vulkan-1.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
data/vulkan-1.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
setup.exe
Resource
win10v2004-20230220-en
General
-
Target
data/vulkan-1.dll
-
Size
894KB
-
MD5
4b29603d5f208f805a5227fa1d6713cc
-
SHA1
ef7c6478e26dd2c2f4fc4ecce0b7d710a9023f09
-
SHA256
998280e73d8a5d62a25d335b291363d15f3746492ac3d5f4479549f9442c6b9e
-
SHA512
f863571fd13aea9bbdd0d96ed671a6cd11f28a3a9677357317b6afc0c8990c23176c1ce68a645057cb2dc09d2fc5d93963b7578ae50aa3636d049b5a68584d31
-
SSDEEP
12288:UQgtdWVrC+8eiZB25pL82ZWdAKT0Yo5KE1so3AJLLP:U1dWtNbBZWz6t1svtT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4564 4804 WerFault.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\data\vulkan-1.dll,#11⤵PID:4804
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4804 -s 3522⤵
- Program crash
PID:4564
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 444 -p 4804 -ip 48041⤵PID:404