Analysis

  • max time kernel
    141s
  • max time network
    141s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    31-03-2023 19:47

General

  • Target

    libstdc++-6.dll

  • Size

    1.9MB

  • MD5

    2514e50f9750aaacfe27d275a04d675b

  • SHA1

    3d5688156cf4f3ea8f0784a511ce32cb2b8fac74

  • SHA256

    e40380a8453efe6b34291c71848d3db5af5f214763de359e8d38fa512528dd93

  • SHA512

    c89af85b34f0c1f8c69b29f77f8135b2b5b9d5c5fa424e8a503a6c9911dc25c0136fadc3fe7825fdb46c78c78c87c1721a6e446cc8eba4e8ed12982d3a1c99de

  • SSDEEP

    24576:xX8v1mM5K0Nq9etN/h4d7NCufTwIyZR5lF4PeYnhSMXlroUf0uKzV0d4:xX8v1mM5K0c4tJhq7NCufTw9RbIeYK

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libstdc++-6.dll,#1
    1⤵
      PID:2572
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 2572 -s 288
        2⤵
        • Program crash
        PID:4340

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2572-121-0x00007FFEF6D60000-0x00007FFEF6F57000-memory.dmp
      Filesize

      2.0MB

    • memory/2572-122-0x00007FFEFB6D0000-0x00007FFEFB6F0000-memory.dmp
      Filesize

      128KB