Analysis

  • max time kernel
    86s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-05-2023 01:01

General

  • Target

    publish/bin/libcroco-0.6-3.dll

  • Size

    237KB

  • MD5

    b481ed028dc922313ae96606f4ac3d9c

  • SHA1

    32cf5c65bc3e67e05cd4ecd6579ba1cb6de4c728

  • SHA256

    736524dd0b26a566c60965850a82d341dc7af61c150fee3f9a4e73dd4ba96b66

  • SHA512

    9b5a779992263cf81680560dcc01a85c5e45a20faf8fdee3adff967e656ab84bdd033e539e1123745504855d4405cd0e0a06257f478c2acf6ce64c58b2db74d3

  • SSDEEP

    3072:aff7k9QBQWwMAnkk7SmddFP8rfHA8pYvNm7pN0A8fCcKni9GtzxiVAkfWLFMMKSz:affVVfJk7SyKfHOquYMFbzSiI

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\publish\bin\libcroco-0.6-3.dll,#1
    1⤵
      PID:3292
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 3292 -s 432
        2⤵
        • Program crash
        PID:4460
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 460 -p 3292 -ip 3292
      1⤵
        PID:4420

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3292-133-0x0000000066440000-0x0000000066483000-memory.dmp

        Filesize

        268KB

      • memory/3292-134-0x0000000070F40000-0x0000000071087000-memory.dmp

        Filesize

        1.3MB

      • memory/3292-135-0x00000000649C0000-0x0000000064AE5000-memory.dmp

        Filesize

        1.1MB

      • memory/3292-136-0x0000000061CC0000-0x0000000061CE8000-memory.dmp

        Filesize

        160KB

      • memory/3292-137-0x0000000066000000-0x000000006610B000-memory.dmp

        Filesize

        1.0MB

      • memory/3292-138-0x0000000063CC0000-0x0000000063CEC000-memory.dmp

        Filesize

        176KB

      • memory/3292-139-0x0000000062E80000-0x0000000062E9F000-memory.dmp

        Filesize

        124KB

      • memory/3292-140-0x0000000064940000-0x0000000064955000-memory.dmp

        Filesize

        84KB

      • memory/3292-141-0x0000000069140000-0x000000006918E000-memory.dmp

        Filesize

        312KB