Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 07:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
008ce31c9b6da0aed682581c02b0de391412a323fb18190c8df3d40782f0e210.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
008ce31c9b6da0aed682581c02b0de391412a323fb18190c8df3d40782f0e210.dll
-
Size
1.2MB
-
MD5
4ed20cdfec28abfbc1b83a29ac077853
-
SHA1
555642ab5626373a1c5fdd470e3aaaba6a1d15b7
-
SHA256
008ce31c9b6da0aed682581c02b0de391412a323fb18190c8df3d40782f0e210
-
SHA512
e9d1df79472b9108315fcef978a109a9d4dd017a887aea4ff674d4fe8b8c4d2c4406636b6b1fa23a978351b8b47f76c4a2f0191f55319bcf1aa2a71afd6ca822
-
SSDEEP
24576:d8fDeHYNQfUz6ZFmAltEqaWeqI3gibYWeJVrE6xkY9+N1GFUU:b2guzPHgrrwYt1
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4292 1128 WerFault.exe 18
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\008ce31c9b6da0aed682581c02b0de391412a323fb18190c8df3d40782f0e210.dll,#11⤵PID:1128
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1128 -s 3282⤵
- Program crash
PID:4292
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 420 -p 1128 -ip 11281⤵PID:2640