a5472bb2e9ed011596aeda9be8cb8fea3bbf6b1299bff525fd3179bd7ef20eb0 | Triage

Analysis

max time kernel
58s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
08-03-2023 16:12

Sharing

Report Analysis Logs

General

Target

publish/avutil-57.dll
Size

753KB
MD5

8b008b755be4c74179a165a6e04c6915
SHA1

077bec5c727b055e0fab8756c799317b68cd81e3
SHA256

478cdbadda5bb02f56f358f6076cfbdaad0be507c3537be994fc2d7b23c6b9d0
SHA512

ef5f4fec59ba58f44b31af552d3da509f394c1e37a68c036ccf71e341f76a0458ec9b7cda31a03f46ae6e339ba416a9248e94ff9a871953b9a16f9db387bb1c8
SSDEEP

12288:QydN3cD2FdjPMUbmExk97ZU1M+2sHoxhj1KSKL9ZGaW3iSX:QydN3RmEguQsHoL1KLg

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

448 3632 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\publish\avutil-57.dll,#1
1⤵
PID:3632

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3632 -s 356
2⤵
- Program crash
PID:448

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 420 -p 3632 -ip 3632
1⤵
PID:4580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3632-133-0x00007FFEA7D10000-0x00007FFEA7EEF000-memory.dmp

Filesize
1.9MB

Download