f72cdd9dc87c924b0c843a5bfa14b258346405938c88679a627d26b14ed15847 | Triage

Analysis

max time kernel
103s
max time network
437s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
05-05-2023 01:01

Sharing

Report Analysis Logs

General

Target

publish/avutil-57.dll
Size

753KB
MD5

a7b21c4bd1a114eff24709d596bcfb20
SHA1

1ec0fa4a1aa105bae5528b74bfe176b4b89791de
SHA256

e46a6821db34a22c0f5a2c7bf43f16cc629c9bcdebfb3a93b4834b0a16815cef
SHA512

7601b79c20367ba777abd7cf075bc7841ba0566b81a83533e543847103524de48de99a9cc1166c2b0759d6dab473515d82faef6efd87024e956a5a74cd32f8c9
SSDEEP

12288:nSdWIND2FdjPMUb2rRE97Z71MJDe332EyFf9w9K29pnaO+iSX:nSdWI82rg9ue33/e4K2O

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1968 4992 WerFault.exe rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\publish\avutil-57.dll,#1
1⤵
PID:4992
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4992 -s 356
  2⤵
  - Program crash
  PID:1968

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 4992 -ip 4992
1⤵
PID:4032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4992-134-0x00007FFD25010000-0x00007FFD251EF000-memory.dmp

Filesize
1.9MB

Download