befeb1ab986fae9a54d4761d072bf50fdbff5c6b1b89b66a6790a3f0bfc4243f | Triage

Analysis

max time kernel
85s
max time network
107s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
10-03-2023 17:42

Sharing

Report Analysis Logs

General

Target

loader_p1_dll_64_n1_x64_inf.dll53.dll
Size

842KB
MD5

1821abde4a17d5c775e197217ca2a1d6
SHA1

b0bf8c2ed7ae2e6ecb5eb2275015343a712ab8b3
SHA256

befeb1ab986fae9a54d4761d072bf50fdbff5c6b1b89b66a6790a3f0bfc4243f
SHA512

e5d46a376692fe2348ec26b94c93ba304c9cc2da5ed81b734c894b3ec473a22f04591bee4b841a142f5b7659f5e4495a579aa0e49abe21002796b4647b06f73c
SSDEEP

24576:iX/wM8bxdVOcVYXNg31qU1c8/UxMzFni:i9EKNI8U68/U+zFn

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1344 5012 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\loader_p1_dll_64_n1_x64_inf.dll53.dll,#1
1⤵
PID:5012

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 5012 -s 328
2⤵
- Program crash
PID:1344

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 404 -p 5012 -ip 5012
1⤵
PID:4940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...