Overview
overview
3Static
static
1Bin.zip
windows10-1703-x64
1Bin.zip
windows10-2004-x64
1Ephemeral.Runtime.dll
windows10-1703-x64
3Ephemeral.Runtime.dll
windows10-2004-x64
3EphemeralEd.exe
windows10-1703-x64
1EphemeralEd.exe
windows10-2004-x64
1libgcc_s_seh-1.dll
windows10-1703-x64
3libgcc_s_seh-1.dll
windows10-2004-x64
3libstdc++-6.dll
windows10-1703-x64
3libstdc++-6.dll
windows10-2004-x64
3Analysis
-
max time kernel
140s -
max time network
148s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system -
submitted
31-03-2023 19:47
Static task
static1
Behavioral task
behavioral1
Sample
Bin.zip
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
Bin.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Ephemeral.Runtime.dll
Resource
win10-20230220-en
Behavioral task
behavioral4
Sample
Ephemeral.Runtime.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
EphemeralEd.exe
Resource
win10-20230220-en
Behavioral task
behavioral6
Sample
EphemeralEd.exe
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
libgcc_s_seh-1.dll
Resource
win10-20230220-en
Behavioral task
behavioral8
Sample
libgcc_s_seh-1.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
libstdc++-6.dll
Resource
win10-20230220-en
Behavioral task
behavioral10
Sample
libstdc++-6.dll
Resource
win10v2004-20230220-en
General
-
Target
libgcc_s_seh-1.dll
-
Size
100KB
-
MD5
99515d5d00704a3c9a602a4de97ace85
-
SHA1
2093b97a2d245e0d395f2d6c7636475168983387
-
SHA256
5c9d9f1b931dc5b023ce2713fe59d4a332da1127a2fe0474625daf2ce7364772
-
SHA512
f6057425e9a64b3d63459780a167da7a9341b800472cdc4425b1f5ac00ed659aa5a1a02425353e6e43dfb65c0731d4172a44b236e59ff02919e05cbe9d63a256
-
SSDEEP
1536:CKY2RMx/RJ/hvOlkb0RgECmkBnzINRwfsZM3ZX71GlXHWCnTMawso7:CORiJ/hvOlk0R9kuNyfFZxopnTOso7
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1768 996 WerFault.exe rundll32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/996-120-0x00007FFC521D0000-0x00007FFC521F0000-memory.dmpFilesize
128KB