2a6ecde72991f3e1dba3d49106e26237bd95a505cd97d0b5caea59723e6fb28e | Triage

Resubmissions

21-02-2023 11:28

230221-nk4hrsge2v 10

18-02-2023 02:18

230218-cq92ysaa6x 8

Analysis

max time kernel
41s
max time network
93s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
21-02-2023 11:28

Sharing

Report Analysis Logs

General

Target

vcomp140.dll
Size

176KB
MD5

884c6f8718fd95c25e16a4789ae3bf7a
SHA1

33f7e6846498871927d21bed11cc4ef41804112a
SHA256

f8d8aca399a0f7e40b2993584404b31f13bf18ea657a5feb85b37b15a249a275
SHA512

48384af2f6359ca3ee6996fc34df8c357164097f0c0c5cb30f5bd080baa6af3b4bcada17fb94933a99955f97c4ac0e554ca2373a5638e29db84e8318165c7b0c
SSDEEP

3072:+Pr3XpMvAiR3LQpxELm3uFX1TfgZhPlUDJR9ZURc/5:+znSvAiO+m3uFFOj+O6/5

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

748 5048 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vcomp140.dll,#1
1⤵
PID:5048

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 5048 -s 324
2⤵
- Program crash
PID:748

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 456 -p 5048 -ip 5048
1⤵
PID:4116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5048-133-0x000001F495D90000-0x000001F495D91000-memory.dmp

Filesize
4KB

Download