Analysis
-
max time kernel
92s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 13:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f7da763b1cd75dbb3d069bfe2f3ddcf09e739e6b2a4dd5ebe6e51a44de6fd644.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
f7da763b1cd75dbb3d069bfe2f3ddcf09e739e6b2a4dd5ebe6e51a44de6fd644.dll
-
Size
1.2MB
-
MD5
dc78d8733cc78847283548c04cb847ab
-
SHA1
a2cfe62a0791f758bdb4bc70874562ad24851982
-
SHA256
f7da763b1cd75dbb3d069bfe2f3ddcf09e739e6b2a4dd5ebe6e51a44de6fd644
-
SHA512
586eabd381a8b58f8abf59beabe9e7de7dcb60c3052f3c9393c7bdd06fd0cacc36849a5531157c6cb438102c7445b9e8114c2d11d09d9249ec468ec79446549d
-
SSDEEP
24576:Lp2qJU4iIuB2cMh1Mgc17V/sCaGhRwQasBxUy0G4ITvVtQOZz0r/aahQIStkC:JmyD8R8QqKbQ8AmvKC
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3716 4320 WerFault.exe 78
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\f7da763b1cd75dbb3d069bfe2f3ddcf09e739e6b2a4dd5ebe6e51a44de6fd644.dll,#11⤵PID:4320
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4320 -s 3282⤵
- Program crash
PID:3716
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4320 -ip 43201⤵PID:2732