Analysis
-
max time kernel
76s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
19/05/2023, 19:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
582ce8dcbfbada26f3428295695f652fe24683cd5b8aed300e069ea203cb7f56.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
582ce8dcbfbada26f3428295695f652fe24683cd5b8aed300e069ea203cb7f56.dll
-
Size
1.2MB
-
MD5
90267a19d1b54b715d3b56454732c816
-
SHA1
92f76260e880e0ee495513d399e13add5a1400a5
-
SHA256
582ce8dcbfbada26f3428295695f652fe24683cd5b8aed300e069ea203cb7f56
-
SHA512
45382f7ea9d39c0cd54bd5a87ee8b9a20c43bad23ff6e27e4dd75c9588c8ddd9588957f97cff88003c8d763b6ce9fad423072cf9c4d121e431d2ba6906e62be1
-
SSDEEP
24576:hLSd9kmW5Z/0L2s/lOvZm/K0s56BWIVMyaaO2HrOBV8eFc2zJdhWjtQO:Kv51/lmasFxFmtn
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3116 3340 WerFault.exe 60
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\582ce8dcbfbada26f3428295695f652fe24683cd5b8aed300e069ea203cb7f56.dll,#11⤵PID:3340
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3340 -s 3282⤵
- Program crash
PID:3116
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 420 -p 3340 -ip 33401⤵PID:3180