Analysis
- max time kernel
101s - max time network
132s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system - submitted
24/04/2023, 20:06
Behavioral task
behavioral1
Sample
NewVersionUnlimited/Desktop_Full/Setup_x64.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
NewVersionUnlimited/Desktop_Full/Setup_x64.exe
Resource
win10v2004-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
NewVersionUnlimited/Desktop_Full/modules.dll
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
NewVersionUnlimited/Desktop_Full/modules.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
NewVersionUnlimited/Desktop_Full/platforms/qwindows.dll
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
NewVersionUnlimited/Desktop_Full/platforms/qwindows.dll
Resource
win10v2004-20230220-en
0 signatures
150 seconds
General
- Target NewVersionUnlimited/Desktop_Full/modules.dll
- Size 907KB
- Sample230424-yvhn6aec75
- SHA256 37ec5f998a5c376d4fcd4342b43a4163d1f043e0f7711e46677cd30013882723
- MD5 dc05f0b8f1a32e872721d3486e6332b8
- SHA1 dbf055b0f934640fadcfaa93971fead8df7a3869
- SHA512 0f89d713237ef11a1ef8d824ad9767bb13fb4f5f334acdd65af0ba6e54cec4a910398636683254b3fe4d46a069a1781187313684ff827a907b8b968134f6efa0
- SSDEEP 24576:z0OY4ZFajHYDTR2yfVbf+c6Z5WODYsHh6g3P0zAk75:z0CZFaj4HR2yfVbd6Z5WODYsHh6g3P03
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3044 1312 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\NewVersionUnlimited\Desktop_Full\modules.dll,#11⤵PID:1312
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1312 -s 3522⤵
- Program crash
PID:3044
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 360 -p 1312 -ip 13121⤵PID:1304