Analysis
-
max time kernel
84s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
24-03-2023 17:19
Static task
static1
Behavioral task
behavioral1
Sample
libgmp-10.dll
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
libgmp-10.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
libgmp-10.dll
-
Size
497KB
-
MD5
1b73b0dcc505152ea8923eebb075244d
-
SHA1
bde642fcd0d6bd4709c45a0735593ed8ef44e0c9
-
SHA256
daa0a2d32134a108ab3af38899d8b6cf4bfc75e3d1d7c3a890a25cedd018afa1
-
SHA512
88e7cf532b33f050e9dc0589d8e17e4af46d3de5aa9626ec713281359e06347182bee0bc62fa55f18fdc6cc7953964455d946630cf33749ce0af50939f7fd74a
-
SSDEEP
12288:ghWlLF45Vn42SEgwNrQi3I0HHFxl6NU7lw8FbEF3l:gmLF4w2SFwNrQiY0H56T8FbEF3l
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2216 2420 WerFault.exe 26
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\libgmp-10.dll,#11⤵PID:2420
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2420 -s 3282⤵
- Program crash
PID:2216
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 424 -p 2420 -ip 24201⤵PID:2600