Analysis
-
max time kernel
146s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2023 11:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0ed8f8989d076310fe68681c00b5841e346dd8f384cef53f9b8fd3de66332bf4.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0ed8f8989d076310fe68681c00b5841e346dd8f384cef53f9b8fd3de66332bf4.dll
-
Size
1.2MB
-
MD5
1a9e1e17625fd0bf91e1dee765644c51
-
SHA1
07e72e17c1317866839ecb00345fa8c5a482060b
-
SHA256
0ed8f8989d076310fe68681c00b5841e346dd8f384cef53f9b8fd3de66332bf4
-
SHA512
11cbc2c3bd1e3ea63db9177dd14d576efb5c14fadc6e0ca0fc2dbb1a2b75911944e7d0738eb167b195138a34a74d04f52dc2b77d44a9f33ebf0f3ed54d89d304
-
SSDEEP
24576:TxhCe4aaHIzu/q3zSYizOyNZpE6Gy+9nKzhfAQEvksapWsqBB:eh/++Y8b/FOCU
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1968 4652 WerFault.exe 61
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0ed8f8989d076310fe68681c00b5841e346dd8f384cef53f9b8fd3de66332bf4.dll,#11⤵PID:4652
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4652 -s 3282⤵
- Program crash
PID:1968
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4652 -ip 46521⤵PID:1780