24e8c911a34e784acfeae70252c1c4c27c7d40883eeee9871d97691bcc0f9df7

Analysis

max time kernel
148s
max time network
170s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
18-05-2023 13:23

Target

EMPRESS/steam_api64.dll
Size

2.3MB
MD5

1d2488d510408bce5706e3fe34cd06eb
SHA1

8ae4c6739fae35011611b62a813798f141b7d670
SHA256

33c3ea60570abb7605e5fdb0e50ffdcba7bfd34351cccaefefe05cece0e61d0d
SHA512

37d73937c36c4c21ce7b37cec5800f33baefcc5ee9926045782ac96799c838c3eb53755edd2f1b2c96fc77be99981954f9e5ff7e6dc3b5d8880d1bc9ad2db7e9
SSDEEP

24576:B0urrg2LP+RaoIzVNvT9vfRYur0FujbG+aId3VS9YIsrnBzyOfCHG5:BRHg2LWookvJr0Fuj1rS9YTrfCH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1356	2600	WerFault.exe	79

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\EMPRESS\steam_api64.dll,#1
1⤵
PID:2600
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2600 -s 488
  2⤵
  - Program crash
  PID:1356

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 476 -p 2600 -ip 2600
1⤵
PID:3788

memory/2600-133-0x00007FF930930000-0x00007FF930B83000-memory.dmp

Filesize
2.3MB

Download