Analysis
-
max time kernel
91s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2023 04:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1db10ab757c0aefbe06e7a3437f6576b14fa5feb97aa5562fdd6d6f20cd66f16.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
1db10ab757c0aefbe06e7a3437f6576b14fa5feb97aa5562fdd6d6f20cd66f16.dll
-
Size
1.2MB
-
MD5
8086eb44b1bb5a204cb2128473308fc9
-
SHA1
f558636052cd749db70a365b3c7bf2a8f34ed117
-
SHA256
1db10ab757c0aefbe06e7a3437f6576b14fa5feb97aa5562fdd6d6f20cd66f16
-
SHA512
19181f8b61e52962ec7183a68a1fdfd0ea3217fba123754f68f60188e33376a7ef55627e110d57aa032ba682724892381a3210430d563f96ade0a3e6d414537d
-
SSDEEP
24576:M/kSJKPlJI73kGeg/3Lnh/Guc8D6npAT/5F4x5us+fZ6nGpms1RNQVWi:20c2Y9zVjTox5uks1RyVl
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1516 4592 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1db10ab757c0aefbe06e7a3437f6576b14fa5feb97aa5562fdd6d6f20cd66f16.dll,#11⤵PID:4592
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4592 -s 3282⤵
- Program crash
PID:1516
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 460 -p 4592 -ip 45921⤵PID:2272