Analysis

  • max time kernel
    30s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    13-04-2023 17:05

General

  • Target

    awake32.dll

  • Size

    235KB

  • MD5

    586069431de993344e781ece9607b24e

  • SHA1

    27fee626b02b60862e8a1d8ea93a681c92bd385a

  • SHA256

    02de2d5cafef10c90d0dca658524c9a36b09cb6bd9482373f0e644393faea5da

  • SHA512

    068b18bc7651ca23a87e585a5aa2029115fa3f9abc04d89c62cacb5f404866ac79d8823e53e1b5c56cd4dd88b03c0bca56a961a359fd872ab420223ed05f117a

  • SSDEEP

    6144:jtjTQl3Tn4zZZDRuptdPTcfm8cpOuJC8DRv/ni/s5Xg:jtjkWzZZQptdPTKccucD

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\awake32.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1540
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 1540 -s 84
      2⤵
      • Program crash
      PID:1416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads