608619f8619075629c9c69f361352a0da6ed7e62f83a0e19c63e0ea32eb7629d | Triage

Resubmissions

29-04-2023 14:19

230429-rmzjdaba93 1

29-04-2023 14:13

230429-rjrdlada9v 3

Analysis

max time kernel
134s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
29-04-2023 14:13

Sharing

Report Analysis Logs

General

Target

_multiprocessing.dll
Size

33KB
MD5

a9a0588711147e01eed59be23c7944a9
SHA1

122494f75e8bb083ddb6545740c4fae1f83970c9
SHA256

7581edea33c1db0a49b8361e51e6291688601640e57d75909fb2007b2104fa4c
SHA512

6b580f5c53000db5954deb5b2400c14cb07f5f8bbcfc069b58c2481719a0f22f0d40854ca640ef8425c498fbae98c9de156b5cc04b168577f0da0c6b13846a88
SSDEEP

768:eZt56pxGyC572edLMILWt3u5YiSyvCVPxWElj:eL5PyC572edLMILWt3E7SyqPx3

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

544 2568 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\_multiprocessing.dll,#1
1⤵
PID:2568

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 2568 -s 356
2⤵
- Program crash
PID:544

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 452 -p 2568 -ip 2568
1⤵
PID:2776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads