Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2023 01:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
beb03c69af75425ad25512259f84924eed135f770e6c44938251d60ab290e432.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
beb03c69af75425ad25512259f84924eed135f770e6c44938251d60ab290e432.dll
-
Size
1.2MB
-
MD5
c2c2821b6e507117feb79d6c20ec4233
-
SHA1
1ea67751eae98e12ccf286c85a2ffa00cf84ada2
-
SHA256
beb03c69af75425ad25512259f84924eed135f770e6c44938251d60ab290e432
-
SHA512
827e92430e97b9f6d8a7a41eec887ca13e0f1073cf28872847854cf42124714c75824ecb15b88b89503569845bbe794a78030dbe1cf04d79bf89b39d98ea692f
-
SSDEEP
24576:4cwlGwp7kYYN856GZBjzxq0ILBriOL3qv9qJG0uKUPWqH8gQ:4c6D485Ic9qMKU/Hu
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4772 3372 WerFault.exe 73
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\beb03c69af75425ad25512259f84924eed135f770e6c44938251d60ab290e432.dll,#11⤵PID:3372
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3372 -s 3282⤵
- Program crash
PID:4772
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 3372 -ip 33721⤵PID:4696