Analysis
-
max time kernel
59s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2023 12:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f6c824c0f6ae13557a6f1e5bf44a03113edc8380c59192251600580459301c81.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
f6c824c0f6ae13557a6f1e5bf44a03113edc8380c59192251600580459301c81.dll
-
Size
1.2MB
-
MD5
c1687f9db1498a3bc35089ceffaaadce
-
SHA1
8efdd7a0a8a943160585b07414b4e1c4a60090c0
-
SHA256
f6c824c0f6ae13557a6f1e5bf44a03113edc8380c59192251600580459301c81
-
SHA512
9f7ffbc9968ec3f56d22f4473abe174d1fef66e1f337409e8ac06540608c9ead99e0daaf9b65ae129ebd75d2df2993782e2a8b4705b2c25d36633de98ae9ecdc
-
SSDEEP
24576:V88Kjwqgo6dmg6XKZz0AUfOwZbB2aBnRLI151E/BgXRzyCF7z7v9:u7+ZU3TODE/CdP9
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 216 2188 WerFault.exe 54
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\f6c824c0f6ae13557a6f1e5bf44a03113edc8380c59192251600580459301c81.dll,#11⤵PID:2188
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2188 -s 3282⤵
- Program crash
PID:216
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 420 -p 2188 -ip 21881⤵PID:4108