Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 00:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5338892a3370a37385c78c2b7c25d7e208aabd1644ab892debbefa50e33c2a16.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
5338892a3370a37385c78c2b7c25d7e208aabd1644ab892debbefa50e33c2a16.dll
-
Size
1.2MB
-
MD5
430784bd8c127732a30b0a622aef2a30
-
SHA1
4533e6d2cab54a33153e8a567372227b898134fd
-
SHA256
5338892a3370a37385c78c2b7c25d7e208aabd1644ab892debbefa50e33c2a16
-
SHA512
67e3c8fd727b39e07bf155b61f2aa6f0ed28ed50339748bfb7092a334300e7db32605d459dfacbe3827e36d3c0847c1d6234b7f2095af0cbe823c83cbe6dc485
-
SSDEEP
24576:zzO33ic+tWTgB3EMMhhe+TJ3YD7sgpfzKTKqJNHjqvHGPujdclCg8PWNrqyW+y:mvSaIuoEKqJ5qBjdfZZ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3364 4740 WerFault.exe 68
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5338892a3370a37385c78c2b7c25d7e208aabd1644ab892debbefa50e33c2a16.dll,#11⤵PID:4740
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4740 -s 3282⤵
- Program crash
PID:3364
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4740 -ip 47401⤵PID:2228