647eb6eaa239f8e109c3ad6ac9a92d4b25f05ee0ded5ef7717aea4e0b430adf3 | Triage

Analysis

max time kernel
90s
max time network
120s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
30-04-2023 10:48

Sharing

Report Analysis Logs

General

Target

LiveChartsRegion.dll
Size

59KB
MD5

0d4672955cddebc60cdc5cb0510294d8
SHA1

8cad08e2fb925656bf7f70f954874f661d2fe32e
SHA256

e0553e5afac83e74fee2d5a69d25ecba12da126fba9e00b8757f769dbdcdb0cc
SHA512

45741d5468e745ed2bbe8b0583243d7a2b5e6a0cafeb23dd6c19831700c93db546ab18ec8c46f58df29ddf805352cd72bc7bc3837759cafe8304ad431b723db7
SSDEEP

1536:TJeUvbSllXaYYeODO3ujE49i+tgX1xPzq3ePM1c6O:rzilXzYeOC+/9HglxPzfPD6O

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1240 4684 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\LiveChartsRegion.dll,#1
1⤵
PID:4684

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4684 -s 796
2⤵
- Program crash
PID:1240

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 184 -p 4684 -ip 4684
1⤵
PID:4264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4684-133-0x000002AA404F0000-0x000002AA40500000-memory.dmp

Filesize
64KB

Download