81610cb0050c847dfd3711ee87b929fbd3aaba18cdea3e2d07775ccb9abb04a4 | Triage

Analysis

max time kernel
74s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
12-03-2023 07:15

Sharing

Report Analysis Logs

General

Target

Clangen/_ctypes.dll
Size

124KB
MD5

291a0a9b63bae00a4222a6df71a22023
SHA1

7a6a2aad634ec30e8edb2d2d8d0895c708d84551
SHA256

820e840759eed12e19f3c485fd819b065b49d9dc704ae3599a63077416d63324
SHA512

d43ef6fc2595936b17b0a689a00be04968f11d7c28945af4c3a74589bd05f415bf4cb3b4e22ac496490daff533755999a69d5962ccffd12e09c16130ed57fd09
SSDEEP

3072:psrzScwzPzuoUxXVxQXKIAqoFQufLTA/1mj9AItH5IIBPmQl:a//wWX8XKIABfLTcmXlyk

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2188	1168	WerFault.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Clangen\_ctypes.dll,#1
1⤵
PID:1168
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1168 -s 396
  2⤵
  - Program crash
  PID:2188

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 456 -p 1168 -ip 1168
1⤵
PID:4496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads