Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 06:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
96d066fc000ce1689bf7a874891b8484680607cc6869a9d870ce908fa98ac963.dll
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
-
Target
96d066fc000ce1689bf7a874891b8484680607cc6869a9d870ce908fa98ac963.dll
-
Size
1.2MB
-
MD5
2ffcb9d650ae2942f550d9c6953f498e
-
SHA1
e896340dffd13782df2a67cfd635b98aabeea382
-
SHA256
96d066fc000ce1689bf7a874891b8484680607cc6869a9d870ce908fa98ac963
-
SHA512
08a927bfa63a0f9a4f39f344fe43c348678d2669731b9abbbb72a5acf514d5943cd08822f220a6326f4562e220bf61a8ece746b8d78475034c7639836d600df3
-
SSDEEP
24576:bDuxKmI0rJwMcB7T/HEbLtg25N9n9usMlBk1aIurzG+lbGzZrxGNV6IOfTEg:x1dTvEHtr5N94Zpu9wXmEg
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4504 4432 WerFault.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\96d066fc000ce1689bf7a874891b8484680607cc6869a9d870ce908fa98ac963.dll,#11⤵PID:4432
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4432 -s 3282⤵
- Program crash
PID:4504
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 456 -p 4432 -ip 44321⤵PID:4124