608619f8619075629c9c69f361352a0da6ed7e62f83a0e19c63e0ea32eb7629d | Triage

Resubmissions

29-04-2023 14:19

230429-rmzjdaba93 1

29-04-2023 14:13

230429-rjrdlada9v 3

Analysis

max time kernel
66s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
29-04-2023 14:13

Sharing

Report Analysis Logs

General

Target

_bz2.dll
Size

81KB
MD5

86d1b2a9070cd7d52124126a357ff067
SHA1

18e30446fe51ced706f62c3544a8c8fdc08de503
SHA256

62173a8fadd4bf4dd71ab89ea718754aa31620244372f0c5bbbae102e641a60e
SHA512

7db4b7e0c518a02ae901f4b24e3860122acc67e38e73f98f993fe99eb20bb3aa539db1ed40e63d6021861b54f34a5f5a364907ffd7da182adea68bbdd5c2b535
SSDEEP

1536:hXOz78ZqjUyAsIi7W/5+D8W35mjZm35ILCVM7SyfYPxe:pOzwpyAFi7WMgW34jZm35ILCVMZoxe

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4276 684 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\_bz2.dll,#1
1⤵
PID:684

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 684 -s 364
2⤵
- Program crash
PID:4276

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 448 -p 684 -ip 684
1⤵
PID:3204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads