9e66b2a30d5244d1dffb968cc1c67fe705ce208eed450ae81f9f48552187749b | Triage

Analysis

max time kernel
135s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
19-03-2023 01:39

Sharing

Report Analysis Logs

General

Target

48.dll
Size

797KB
MD5

b0ad6d2d4c031bdba529c80b9b2957e7
SHA1

153a5ba4665cbcd79afff27d27864f498284d9c0
SHA256

9e66b2a30d5244d1dffb968cc1c67fe705ce208eed450ae81f9f48552187749b
SHA512

f7c48df7b41a2284b959efa1315cc917fa5d36740752d90e8aa87965479961f8da8ed7e3f0cc6a7c7490665fcae017086e32b38f4d54b027f48398ea8bf8682d
SSDEEP

12288:k+uUojq+LoAymyU6C6khqVlvV+FhTwrnL5k:cMAQUH6MqVlv9rnL

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4092 3712 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\48.dll,#1
1⤵
PID:3712

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3712 -s 328
2⤵
- Program crash
PID:4092

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 360 -p 3712 -ip 3712
1⤵
PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...