2a6ecde72991f3e1dba3d49106e26237bd95a505cd97d0b5caea59723e6fb28e | Triage

Resubmissions

21-02-2023 11:28

230221-nk4hrsge2v 10

18-02-2023 02:18

230218-cq92ysaa6x 8

Analysis

max time kernel
55s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
21-02-2023 11:28

Sharing

Report Analysis Logs

General

Target

vcruntime140.dll
Size

94KB
MD5

11d9ac94e8cb17bd23dea89f8e757f18
SHA1

d4fb80a512486821ad320c4fd67abcae63005158
SHA256

e1d6f78a72836ea120bd27a33ae89cbdc3f3ca7d9d0231aaa3aac91996d2fa4e
SHA512

aa6afd6bea27f554e3646152d8c4f96f7bcaaa4933f8b7c04346e410f93f23cfa6d29362fd5d51ccbb8b6223e094cd89e351f072ad0517553703f5bf9de28778
SSDEEP

1536:yDHLG4SsAzAvadZw+1Hcx8uIYNUzUnHg4becbK/zJrCT:yDrfZ+jPYNznHg4becbK/Fr

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4516 4636 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vcruntime140.dll,#1
1⤵
PID:4636

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4636 -s 328
2⤵
- Program crash
PID:4516

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 448 -p 4636 -ip 4636
1⤵
PID:1220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...