608619f8619075629c9c69f361352a0da6ed7e62f83a0e19c63e0ea32eb7629d | Triage

Resubmissions

29-04-2023 14:19

230429-rmzjdaba93 1

29-04-2023 14:13

230429-rjrdlada9v 3

Analysis

max time kernel
135s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
29-04-2023 14:13

Sharing

Report Analysis Logs

General

Target

_hashlib.dll
Size

63KB
MD5

d4674750c732f0db4c4dd6a83a9124fe
SHA1

fd8d76817abc847bb8359a7c268acada9d26bfd5
SHA256

caa4d2f8795e9a55e128409cc016e2cc5c694cb026d7058fc561e4dd131ed1c9
SHA512

97d57cfb80dd9dd822f2f30f836e13a52f771ee8485bc0fd29236882970f6bfbdfaac3f2e333bba5c25c20255e8c0f5ad82d8bc8a6b6e2f7a07ea94a9149c81e
SSDEEP

1536:/smKJPganCspF1dqZAC2QjP2RILOIld7SyEPxDF:/smKpgNoF1dqZDnjP2RILOIv2xB

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

812 5084 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\_hashlib.dll,#1
1⤵
PID:5084

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 5084 -s 384
2⤵
- Program crash
PID:812

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 420 -p 5084 -ip 5084
1⤵
PID:4944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads