0a06fb2cbb200a1ab76de4b4e5fe2284932b0c65707ab304921ea2d739ea90da | Triage

Analysis

max time kernel
122s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
05-05-2023 22:59

Sharing

Report Analysis Logs

General

Target

swscale-4.dll
Size

518KB
MD5

1bc9902c87f695a9e390ab9c7fa898a8
SHA1

566bcd622393931f90c523dbdb80d59bea83d465
SHA256

6ff7853012f82f4bbf9cd83d0e26a33a218b33e61d2fe37a8cea278897e3b062
SHA512

18c65a0cbc12abe845375bdb67e55e31157db0263a899fc2bb9291e49cedae3dfd0093c546f025ab09b5abd6dd4e98884c4a2294df045e2e19921a3c8ca89010
SSDEEP

6144:z2Zothyuf2wC7GhYPNB8zZt9U+u1kPgzQkkkGaaywwxde+:koXyuf2wC7GhYPNam+YkPgzlxA+

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

3716 1812 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\swscale-4.dll,#1
1⤵
PID:1812

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1812 -s 348
2⤵
- Program crash
PID:3716

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 460 -p 1812 -ip 1812
1⤵
PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1812-133-0x00007FFE8E0E0000-0x00007FFE8E173000-memory.dmp

Filesize
588KB

Download
memory/1812-134-0x00007FFE8DA90000-0x00007FFE8DB4D000-memory.dmp

Filesize
756KB

Download