Analysis
-
max time kernel
112s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 06:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e3c0e417d51f9415918b7a1b566d5859c682da8c11ff91139ab8e8879fd93585.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
e3c0e417d51f9415918b7a1b566d5859c682da8c11ff91139ab8e8879fd93585.dll
-
Size
1.2MB
-
MD5
34e8da76e72be19c4ad6e7cb6a3796fe
-
SHA1
8916f37453c0e36bc803541de7d19c837958a1ae
-
SHA256
e3c0e417d51f9415918b7a1b566d5859c682da8c11ff91139ab8e8879fd93585
-
SHA512
a7957b43c9881bf5e6e2c7cc7d65a172c5cdf910f90b5bbdc614607b3f9fc3aebd2cee1b92f8f1874b4318a23f791d98550c1fd4a5f6212f0eaa3a1eeaef5ecd
-
SSDEEP
24576:hLSd9kmW5Z/0L2s/lOvZm/K0s56BWIVMyaaO2HrOBV8eFc2zJdhWjtQS:Kv51/lmasFxFmtv
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 500 2140 WerFault.exe 41
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e3c0e417d51f9415918b7a1b566d5859c682da8c11ff91139ab8e8879fd93585.dll,#11⤵PID:2140
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2140 -s 3282⤵
- Program crash
PID:500
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 444 -p 2140 -ip 21401⤵PID:4644