0fe8f2044189a284d991b7eb5689c371718c67d3d539f696402665c02319b14e | Triage

Analysis

max time kernel
144s
max time network
148s
platform
windows10-1703_x64
resource
win10-20230220-en
resource tags

arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
submitted
31-03-2023 19:47

Sharing

Report Analysis Logs

General

Target

Ephemeral.Runtime.dll
Size

111KB
MD5

249ea84585865aaeb4ecb126f12e6baf
SHA1

a849e55bf6f2f46aa3e0713f033ecd020f4debc2
SHA256

71ff22ffd4dec453b73f8ad1d844b7cd5ed35adeacda1bab06c64874c09cb4e6
SHA512

37f30e0ca6490a665d57f7231589dac1fa6cf28eb2e129bdd2777310777d5157e0bc41701910dfa0bfd4884ab4e42e5b395130668b4d8dba3949f28bf7567d1c
SSDEEP

1536:LHnzcVCZZ1Qr9J6EYmMC4BLavhMmPi1naP9a+rAtZnT1+2HeVaN:DSCZZ6IxV5

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4360 2908 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Ephemeral.Runtime.dll,#1
1⤵
PID:2908

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2908 -s 288
2⤵
- Program crash
PID:4360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2908-122-0x00007FFECA780000-0x00007FFECA7A0000-memory.dmp

Filesize
128KB

Download
memory/2908-121-0x00007FFEC7690000-0x00007FFEC76B1000-memory.dmp

Filesize
132KB

Download
memory/2908-123-0x00007FFEC7210000-0x00007FFEC7407000-memory.dmp

Filesize
2.0MB

Download