Analysis
-
max time kernel
139s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
19/05/2023, 20:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win64.DropperX-gen.15742.dll
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win64.DropperX-gen.15742.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
SecuriteInfo.com.Win64.DropperX-gen.15742.dll
-
Size
1.2MB
-
MD5
8f59ec5c7010d957b459dc097479fd8d
-
SHA1
1f88391816623d0d7c91769f968850656d183598
-
SHA256
67bbd7501acba95a94a174e9207035d1deb292d2d1752cbc5073d06cc724d24a
-
SHA512
f8cc12084c28c13e9ed7ad2cad5cd69714a6308da33bf690cf16fed089100838e752543a28d3a6f2bff7d5763cfd0d0303b8fe5eac797299aa1ffa84824d62cd
-
SSDEEP
24576:Lp2qJU4iIuB2cMh1Mgc17V/sCaGhRwQasBxUy0G4ITvVtQOZz0r/aahQIStkn:JmyD8R8QqKbQ8AmvKn
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4976 4020 WerFault.exe 66
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.DropperX-gen.15742.dll,#11⤵PID:4020
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4020 -s 3282⤵
- Program crash
PID:4976
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 456 -p 4020 -ip 40201⤵PID:4628