204ae820a286ea0b75063163c29e21ad34084b7d86510a7db0b2c5e67fb333cb | Triage

Analysis

max time kernel
87s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
13-04-2023 17:05

Sharing

Report Analysis Logs

General

Target

awake32.dll
Size

235KB
MD5

586069431de993344e781ece9607b24e
SHA1

27fee626b02b60862e8a1d8ea93a681c92bd385a
SHA256

02de2d5cafef10c90d0dca658524c9a36b09cb6bd9482373f0e644393faea5da
SHA512

068b18bc7651ca23a87e585a5aa2029115fa3f9abc04d89c62cacb5f404866ac79d8823e53e1b5c56cd4dd88b03c0bca56a961a359fd872ab420223ed05f117a
SSDEEP

6144:jtjTQl3Tn4zZZDRuptdPTcfm8cpOuJC8DRv/ni/s5Xg:jtjkWzZZQptdPTKccucD

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5100 1564 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\awake32.dll,#1
1⤵
PID:1564

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1564 -s 332
2⤵
- Program crash
PID:5100

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 448 -p 1564 -ip 1564
1⤵
PID:1492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...