Analysis
-
max time kernel
141s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/03/2023, 02:50
Static task
static1
Behavioral task
behavioral1
Sample
Protein_x64.4.1.dll
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Protein_x64.4.1.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
Protein_x64.4.1.dll
-
Size
3KB
-
MD5
4f1ba0bef9467b2525ec453792461b31
-
SHA1
799fded6489ad4df7d3459cc3bb7ef167c04da6c
-
SHA256
d328c59733c4953ca4a923ccf04b37a4de8839e54d9e8901730797311c7ab6b8
-
SHA512
cf9677fbeba412a8a43eda4f67dc2711b89e8262564e425b949ce8e52be75bbbfc75ced1492d7b84113f7cf373f4d3cb1b5ad5e43d11c4fe40749a803448db9c
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1952 2008 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Protein_x64.4.1.dll,#11⤵PID:2008
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2008 -s 3442⤵
- Program crash
PID:1952
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 448 -p 2008 -ip 20081⤵PID:672