Analysis
-
max time kernel
136s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
19-05-2023 21:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1ffe612c41f278ee219d6077135f785719bbbdc35f19072cc11442f2169405b7.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
1ffe612c41f278ee219d6077135f785719bbbdc35f19072cc11442f2169405b7.dll
-
Size
1.2MB
-
MD5
7ab4149f294af398161f0f9bde9ba2d7
-
SHA1
792fb15df1f9eaf80d5969956f13fba237284984
-
SHA256
1ffe612c41f278ee219d6077135f785719bbbdc35f19072cc11442f2169405b7
-
SHA512
d95057393e6bc1628d0a929ad790f9d2bff34df4c1a094a0c4be9ef0e68365b0f659299eeeece6cac84554c231b79ba06fe124634d38083a4021048ae48842c9
-
SSDEEP
24576:eVoPU3nHLxhYhpo6Xys3ciduACgzSWZCP4GRqpmU4cK:9ioeS70EUPRq8Zl
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2368 1876 WerFault.exe 84
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1ffe612c41f278ee219d6077135f785719bbbdc35f19072cc11442f2169405b7.dll,#11⤵PID:1876
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1876 -s 3282⤵
- Program crash
PID:2368
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 436 -p 1876 -ip 18761⤵PID:1944