608619f8619075629c9c69f361352a0da6ed7e62f83a0e19c63e0ea32eb7629d | Triage

Resubmissions

29-04-2023 14:19

230429-rmzjdaba93 1

29-04-2023 14:13

230429-rjrdlada9v 3

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
29-04-2023 14:13

Sharing

Report Analysis Logs

General

Target

_zoneinfo.dll
Size

43KB
MD5

4602d49263cc992fba85da6199d8ecb5
SHA1

6386532f022943fc87a9409d9ab17be08d8d6855
SHA256

e48336ad990797fa0c8a902ba2cca6966ea3bf13c2d3b021f1673ca13455d862
SHA512

b8352156c4a86abf665e037a1a02fca23217d0077194011aa485bdab57e0d771550b73ea4d50f7d18bbdc22ca47e2fc168fac11fb7286715df46b16cf6120f67
SSDEEP

768:alAjmjpfGzveDlkNTOFLb07UuoGc6rRIL9Xe5YiSyvwPxWEaJV:aUy8rrNTOFLb07UuoGrRIL9XU7Sy4PxG

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2256 4412 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\_zoneinfo.dll,#1
1⤵
PID:4412

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4412 -s 356
2⤵
- Program crash
PID:2256

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 460 -p 4412 -ip 4412
1⤵
PID:3312

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads