647eb6eaa239f8e109c3ad6ac9a92d4b25f05ee0ded5ef7717aea4e0b430adf3 | Triage

Analysis

max time kernel
54s
max time network
59s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
30-04-2023 03:27

Sharing

Report Analysis Logs

General

Target

LiveChartsRegion.dll
Size

59KB
MD5

0d4672955cddebc60cdc5cb0510294d8
SHA1

8cad08e2fb925656bf7f70f954874f661d2fe32e
SHA256

e0553e5afac83e74fee2d5a69d25ecba12da126fba9e00b8757f769dbdcdb0cc
SHA512

45741d5468e745ed2bbe8b0583243d7a2b5e6a0cafeb23dd6c19831700c93db546ab18ec8c46f58df29ddf805352cd72bc7bc3837759cafe8304ad431b723db7
SSDEEP

1536:TJeUvbSllXaYYeODO3ujE49i+tgX1xPzq3ePM1c6O:rzilXzYeOC+/9HglxPzfPD6O

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

668 2012 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\LiveChartsRegion.dll,#1
1⤵
PID:2012
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2012 -s 796
  2⤵
  - Program crash
  PID:668

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 456 -p 2012 -ip 2012
1⤵
PID:932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads