608619f8619075629c9c69f361352a0da6ed7e62f83a0e19c63e0ea32eb7629d | Triage

Resubmissions

29-04-2023 14:19

230429-rmzjdaba93 1

29-04-2023 14:13

230429-rjrdlada9v 3

Analysis

max time kernel
156s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
29-04-2023 14:13

Sharing

Report Analysis Logs

General

Target

_queue.dll
Size

30KB
MD5

d8c1b81bbc125b6ad1f48a172181336e
SHA1

3ff1d8dcec04ce16e97e12263b9233fbf982340c
SHA256

925f05255f4aae0997dc4ec94d900fd15950fd840685d5b8aa755427c7422b14
SHA512

ccc9f0d3aca66729832f26be12f8e7021834bbee1f4a45da9451b1aa5c2e63126c0031d223af57cf71fad2c85860782a56d78d8339b35720194df139076e0772
SSDEEP

768:bxrUGCpa6rIxdK/rAwVILQU85YiSyvz5PxWEaAc:trUZIzYrAwVILQUG7SydPxDc

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1208 4512 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\_queue.dll,#1
1⤵
PID:4512

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4512 -s 356
2⤵
- Program crash
PID:1208

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 188 -p 4512 -ip 4512
1⤵
PID:4956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads