Analysis

  • max time kernel
    139s
  • max time network
    180s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-05-2023 01:21

General

  • Target

    publish/bin/libatk-1.0-0.dll

  • Size

    136KB

  • MD5

    ce9ab2defa6d7a584152a54108c30bfc

  • SHA1

    8b221ad2c5c428c0b73b30f9fbebd1a99186c8f1

  • SHA256

    2a80279b8dbeec1bb9b4121ccd4801034599184dab1c9166d5a29df1fd819df9

  • SHA512

    10a9d8e4ad9d120260273f70c2a820c10429cff86ba770ffe1cb0f57097175e1367c52b7f7a97ac29e62b09f08a2799f3c43faf9df25dd44d39fed44b25ecd89

  • SSDEEP

    1536:lQ/IMw1Tk3vQeJEMq8iMjIV9WBmF/9yjr7YrDn8KBBIxpRu63GQsU9jDQn7BmCoU:6ETWvrEMq8iMjIfKjArDnP0EzUxDGMvU

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\publish\bin\libatk-1.0-0.dll,#1
    1⤵
      PID:1284
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 1284 -s 448
        2⤵
        • Program crash
        PID:428
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 448 -p 1284 -ip 1284
      1⤵
        PID:1900

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/1284-133-0x000000006BD40000-0x000000006BD69000-memory.dmp

        Filesize

        164KB

      • memory/1284-134-0x0000000061CC0000-0x0000000061CE8000-memory.dmp

        Filesize

        160KB

      • memory/1284-136-0x000000006B740000-0x000000006B750000-memory.dmp

        Filesize

        64KB

      • memory/1284-137-0x00000000649C0000-0x0000000064AE5000-memory.dmp

        Filesize

        1.1MB

      • memory/1284-135-0x0000000067F00000-0x0000000067F57000-memory.dmp

        Filesize

        348KB

      • memory/1284-138-0x0000000066000000-0x000000006610B000-memory.dmp

        Filesize

        1.0MB

      • memory/1284-139-0x0000000064940000-0x0000000064955000-memory.dmp

        Filesize

        84KB

      • memory/1284-140-0x0000000069140000-0x000000006918E000-memory.dmp

        Filesize

        312KB