7ac69e9c3c906d311447b1f4235f1047673ce3b4882c5d45d8e2c60de6152972

Analysis

max time kernel
96s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
13-04-2023 02:38

Target

湖南婚姻/libcrypto-1_1.dll
Size

3.3MB
MD5

63c756d74c729d6d24da2b8ef596a391
SHA1

7610bb1cbf7a7fdb2246be55d8601af5f1e28a00
SHA256

17d0f4c13c213d261427ee186545b13ef0c67a99fe7ad12cd4d7c9ec83034ac8
SHA512

d9cf045bb1b6379dd44f49405cb34acf8570aed88b684d0ab83af571d43a0d8df46d43460d3229098bd767dd6e0ef1d8d48bc90b9040a43b5469cef7177416a2
SSDEEP

49152:DTKuk2HvIU6iwpOjPWBdwQN+5X2uyWsrV4+OGyu1BYGx6KCIrA9NPe0Cs5Z1CPwE:Pg+Hb5Wt+2BoBIcU0CsD1CPwDv3uFfJZ

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4316	3492	WerFault.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\湖南婚姻\libcrypto-1_1.dll,#1
1⤵
PID:3492
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3492 -s 384
  2⤵
  - Program crash
  PID:4316

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 364 -p 3492 -ip 3492
1⤵
PID:1076