Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 21:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
33b444b08f4a75dc8c458c7e343444251ecc65774339c6a9c9e5e26ce9aa5ab7.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
33b444b08f4a75dc8c458c7e343444251ecc65774339c6a9c9e5e26ce9aa5ab7.dll
-
Size
1.2MB
-
MD5
51dffcf81f61b389b2040fad8a3ef885
-
SHA1
6b55023e9243d833e945f585ef4bdb8627ec50fa
-
SHA256
33b444b08f4a75dc8c458c7e343444251ecc65774339c6a9c9e5e26ce9aa5ab7
-
SHA512
506e47c73334467f9f6bae9bd2868352c755d532079d4d8a118d9d4dbad61212052ae5ddeccbdf70a9923f20f3a91af683ea6105661fe16c9cfb65fc521c8ded
-
SSDEEP
24576:ln+5EYhtdpUjD+2c7nwn5tI3194JLGPpxR4kY7CefCv9F2STtIekpbm:SV0Fe3WMd4ks1ezTtpsm
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3460 840 WerFault.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\33b444b08f4a75dc8c458c7e343444251ecc65774339c6a9c9e5e26ce9aa5ab7.dll,#11⤵PID:840
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 840 -s 3282⤵
- Program crash
PID:3460
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 460 -p 840 -ip 8401⤵PID:4724