015d7e09fabb3c9bf28ca4887830dcdecee775c490229b34c445ad06bf24ff6b | Triage

Analysis

max time kernel
46s
max time network
73s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
22-02-2023 03:54

Sharing

Report Analysis Logs

General

Target

port/cont/rich/kaps/unbcl.dll
Size

1.0MB
MD5

75beda2b1a92744dbb05878e4491dde4
SHA1

50e01b391b711c92046183a28df3eb0e92c29128
SHA256

b6e98f66ae143bc38e5381fa8c0d99e58434169f25202e520664419c2b35412b
SHA512

81359115deac81e540a1c6f95b6ee8bc57adbc7e514c5c997dcd05e20333ef3b6f52214de74bdc7b55471cfd7be5fb53dc1712cef416b7e9037d030c6c7a2b5b
SSDEEP

12288:UpiYCl2vyrqmx32Mfban+AYMTkgWOS42xGeyz:yiYC0vymu3rbGiMT5WOS42xG7

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1304 4224 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\port\cont\rich\kaps\unbcl.dll,#1
1⤵
PID:4224

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4224 -s 352
2⤵
- Program crash
PID:1304

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 416 -p 4224 -ip 4224
1⤵
PID:3424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...