Analysis
-
max time kernel
138s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 00:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bd6905124bff8baeee2736cf6435925b98924350492d4ca8fedefd6772dd96e5.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
bd6905124bff8baeee2736cf6435925b98924350492d4ca8fedefd6772dd96e5.dll
-
Size
1.2MB
-
MD5
37b1c9f06523f22c3e438681db50f657
-
SHA1
c7df37f79cccd2df698194ff8641c21bd9e04436
-
SHA256
bd6905124bff8baeee2736cf6435925b98924350492d4ca8fedefd6772dd96e5
-
SHA512
eccab1e2befa6331fb48cf3438f9534a4b921ea9d02d692e882d916ec1ab59d68dcbd39df10101237a3f1fa9355b550fd4a78de30d03ca1babe41fa744efc8c3
-
SSDEEP
24576:lwOhCPykWGGrYL1hb4LPRAMXLXuw2tL0IGrkNBxgvx3FWlDx:9TKhL4LP+AMtBoAx
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1364 3388 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\bd6905124bff8baeee2736cf6435925b98924350492d4ca8fedefd6772dd96e5.dll,#11⤵PID:3388
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3388 -s 3282⤵
- Program crash
PID:1364
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 468 -p 3388 -ip 33881⤵PID:1888