e1dcc9c259c78a051ead4ae56f9eabdb829bb7c832fe81af6f65f6b465b7f026 | Triage

Analysis

max time kernel
75s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20230220-es
resource tags

arch:x64arch:x86image:win10v2004-20230220-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
27-03-2023 05:35

Sharing

Report Analysis Logs

General

Target

SkyFlick2.1_WIN11/libcurl.dll
Size

479KB
MD5

a773fd7caa6ee0b42ad5d9bad74b1f01
SHA1

325d625970d6ed18606858fee5281f2a51432ec6
SHA256

805979c09a14d249f3086053ef55c5a7d1a409dbba83c2e0ee80befcfc875aa3
SHA512

d6f5deae4b2472a9be53229939fb898e2a8bec1dad912a2d9af3d0b355e901e5ee502817c2a71d80fa49524c236d08221f988b0f23a6d3f6d18f5ea8285a4dbe
SSDEEP

12288:y/mw+ZFUm8PPObIY/fCmSwj0O79RiYpKlCuaxAQY:ywgPObIY/amSwj06lomA

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1828 2880 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SkyFlick2.1_WIN11\libcurl.dll,#1
1⤵
PID:2880

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2880 -s 368
2⤵
- Program crash
PID:1828

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 448 -p 2880 -ip 2880
1⤵
PID:4136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...