ab5268c60129d2e996824459f1837505c828184d08843dee542dc1e9a90db70a | Triage

Analysis

max time kernel
116s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
04-03-2023 20:19

Sharing

Report Analysis Logs

General

Target

version.dll
Size

30KB
MD5

17c1e1099b65051bb6dec71fea37315b
SHA1

8ed26469afbd53da7749ef9c6ab8c7f010e9bb1e
SHA256

e549d528fee40208df2dd911c2d96b29d02df7bef9b30c93285f4a2f3e1ad5b0
SHA512

e5274c47786f14c4275307c80d0eca48797267d32b069aed30993e571ead0289652e1254bd2ecabef3b2bc2039504e156ed2eae9c2c280b31034fa457a32ea79
SSDEEP

768:FrAO9YmckVPxIiTAqMwwyg2ulzxAfv5r6wD1Pe3pU:FrnYmckVPxIiTAqMwm2ulzxAfv1Pe6

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1740	1464	WerFault.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\version.dll,#1
1⤵
PID:1464
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1464 -s 328
  2⤵
  - Program crash
  PID:1740

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 460 -p 1464 -ip 1464
1⤵
PID:848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads