608619f8619075629c9c69f361352a0da6ed7e62f83a0e19c63e0ea32eb7629d | Triage

Resubmissions

29-04-2023 14:19

230429-rmzjdaba93 1

29-04-2023 14:13

230429-rjrdlada9v 3

Analysis

max time kernel
90s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
29-04-2023 14:13

Sharing

Report Analysis Logs

General

Target

_ctypes.dll
Size

120KB
MD5

1635a0c5a72df5ae64072cbb0065aebe
SHA1

c975865208b3369e71e3464bbcc87b65718b2b1f
SHA256

1ea3dd3df393fa9b27bf6595be4ac859064cd8ef9908a12378a6021bba1cb177
SHA512

6e34346ea8a0aacc29ccd480035da66e280830a7f3d220fd2f12d4cfa3e1c03955d58c0b95c2674aea698a36a1b674325d3588483505874c2ce018135320ff99
SSDEEP

3072:0OEESRiaiH6lU1vxqfrId0sx3gVILLPykxA:hj+I1vAfrIRx3gN

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4004 1384 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\_ctypes.dll,#1
1⤵
PID:1384

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1384 -s 368
2⤵
- Program crash
PID:4004

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 456 -p 1384 -ip 1384
1⤵
PID:772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads