Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 03:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
89ce586e1c71a546e5ed8222a415d0c5aa6df629f7ba9798c47bfd677f252bb6.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
89ce586e1c71a546e5ed8222a415d0c5aa6df629f7ba9798c47bfd677f252bb6.dll
-
Size
1.2MB
-
MD5
73c441a0adc4cc678b0ac34189a630ed
-
SHA1
8c7eb2317d74515522da4ced2a92155dbe9a9bbb
-
SHA256
89ce586e1c71a546e5ed8222a415d0c5aa6df629f7ba9798c47bfd677f252bb6
-
SHA512
87abf327d8465f17f64a6b6d7e545be7b35aba6a8d6f44e3febd9a5449601a0f46038e418bc2a39446fd4252f0fab057c460371c4be7410bfd2874f58c06c857
-
SSDEEP
24576:SxOU/7+LUu4af1WAiwdwjUWHWQuONnh7AC2Dq+FRPa8DacrDSt:YKVvxa4s0HBacit
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1436 1972 WerFault.exe 84
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\89ce586e1c71a546e5ed8222a415d0c5aa6df629f7ba9798c47bfd677f252bb6.dll,#11⤵PID:1972
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1972 -s 3282⤵
- Program crash
PID:1436
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 456 -p 1972 -ip 19721⤵PID:4464