Analysis

  • max time kernel
    1431s
  • max time network
    1226s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    18/05/2023, 11:29

General

  • Target

    AppSetup_Update-Launcher/Data/resources/app.asar.unpacked/build/notificationstate.dll

  • Size

    106KB

  • MD5

    5d79aff7bc28d3b0c78f0162efdee407

  • SHA1

    98818c05a5310325fd1f8b00537fda50a0c58d91

  • SHA256

    5051d14c3067d856c74f47994ae2ba34f5994477607b5af0ce349f1f6cf8543b

  • SHA512

    c94987d7f450a2e992b946739c9fbac2945ebdda164a4917d00c79086482a02267da433bad710a407a02f8681b33be9069b4d17bf9d32f420a8f7d4d723ef716

  • SSDEEP

    3072:2NSQ5s9mQpnh5A9gdUhvVYL16NAqQoppZS:mvsgQlh5C+UhveLH2pZS

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\AppSetup_Update-Launcher\Data\resources\app.asar.unpacked\build\notificationstate.dll,#1
    1⤵
      PID:3592
      • C:\Windows\system32\WerFault.exe
        C:\Windows\system32\WerFault.exe -u -p 3592 -s 224
        2⤵
        • Program crash
        PID:5008
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -pss -s 412 -p 3592 -ip 3592
      1⤵
        PID:5092

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads