Analysis
-
max time kernel
135s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 23:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
832b6c7a4bbf6354e056d0df315d641bf767bb95201f4c931eb695fe218d9a76.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
832b6c7a4bbf6354e056d0df315d641bf767bb95201f4c931eb695fe218d9a76.dll
-
Size
1.2MB
-
MD5
c067f07c557a91480ae3be285eeb632c
-
SHA1
47f4a79fe43586385ab96881a86ad5c720906f7a
-
SHA256
832b6c7a4bbf6354e056d0df315d641bf767bb95201f4c931eb695fe218d9a76
-
SHA512
52f4d25408e29dbd7dc8c22205bf3f73b59b81aa85d8a04bd5172c62b1f05ad1d275f4ffbf4aefa350bb6e95820744a9c04fdabec39b4f8a8aaeb8822922b643
-
SSDEEP
24576:4cwlGwp7kYYN856GZBjzxq0ILBriOL3qv9qJG0uKUPWqH8gP:4c6D485Ic9qMKU/H1
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 860 5040 WerFault.exe 17
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\832b6c7a4bbf6354e056d0df315d641bf767bb95201f4c931eb695fe218d9a76.dll,#11⤵PID:5040
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 5040 -s 3282⤵
- Program crash
PID:860
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 5040 -ip 50401⤵PID:4820