Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2023 06:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
013647c0e4ba9842cffbdf73c4d45c0880819f942df28b198566b3a0a5340dce.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
013647c0e4ba9842cffbdf73c4d45c0880819f942df28b198566b3a0a5340dce.dll
-
Size
1.2MB
-
MD5
b67786e85a76ba442238879ce67480de
-
SHA1
2abff2d05b5fc3bbe023f7ef84839ae78092050e
-
SHA256
013647c0e4ba9842cffbdf73c4d45c0880819f942df28b198566b3a0a5340dce
-
SHA512
1cdffb64c29ea5ad09da579de0457541b6f4740483b0b943259ae7a7af984a01296d831f8860fdd237c74148f05d6bf9db3ddb1bce85da09447a78b75ba8eff9
-
SSDEEP
24576:2l70x0gt0nxZLHfHulAR02Sq2lr5ljm/91JGvd+mmiSyZHpVMXD+mwCyWJDu:J/I/OlARNSq2ShiVH7oZlJDu
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1980 1748 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\013647c0e4ba9842cffbdf73c4d45c0880819f942df28b198566b3a0a5340dce.dll,#11⤵PID:1748
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1748 -s 3282⤵
- Program crash
PID:1980
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 432 -p 1748 -ip 17481⤵PID:1776