Analysis
-
max time kernel
77s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2023 12:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
464921b1ffd8497f664d1aecf092011d56e31f4e632182cb4b4bbbb00bec2abb.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
464921b1ffd8497f664d1aecf092011d56e31f4e632182cb4b4bbbb00bec2abb.dll
-
Size
1.2MB
-
MD5
750bb7cd03c26a0c0f37cce830bd52e2
-
SHA1
1cd9319ca9450c19e063b3c07de787102aee96e2
-
SHA256
464921b1ffd8497f664d1aecf092011d56e31f4e632182cb4b4bbbb00bec2abb
-
SHA512
3b4fa2b40e6438b00005a199e24d418228b3f47126288a90bce5f8650cecc96f07e41b586e81dc865d47c6ba249988c1300fd595da013b7447d4f350199e8678
-
SSDEEP
24576:hurBQwSCJul5A16u4B43RcGO6KH4uDcYM8wjUPdPL3pPAgMCw0wBR1UAdT:j0iB+3QZYPsaCw0W4s
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1908 3080 WerFault.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\464921b1ffd8497f664d1aecf092011d56e31f4e632182cb4b4bbbb00bec2abb.dll,#11⤵PID:3080
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3080 -s 3282⤵
- Program crash
PID:1908
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 448 -p 3080 -ip 30801⤵PID:1248