Analysis
-
max time kernel
135s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 13:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aff7454808b02e12177cf720703a150466426bd284a5748a7f39f7cb7a91bfbf.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
aff7454808b02e12177cf720703a150466426bd284a5748a7f39f7cb7a91bfbf.dll
-
Size
1.2MB
-
MD5
573e26aecaea80f993be69ddc2be3bf1
-
SHA1
3b050d73bd7bebfd93a60bca4a7f8c21ab353991
-
SHA256
aff7454808b02e12177cf720703a150466426bd284a5748a7f39f7cb7a91bfbf
-
SHA512
1a39d42c2474085b0260f90c8c72e2e9d54052a5e26d92025327425c7bf87faa445470c2a98ccbfdc630804ed2db5fa1f547feac38f29a84dac5558f30250c93
-
SSDEEP
24576:rRVKL5uAztHwZpU3Hr9gHg+Rin685cYjsUwJAHGB0KMyDxUBeu5/s:eYj23H54g+KjsUwJ0jKMyh
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1960 1872 WerFault.exe 50
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\aff7454808b02e12177cf720703a150466426bd284a5748a7f39f7cb7a91bfbf.dll,#11⤵PID:1872
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1872 -s 3282⤵
- Program crash
PID:1960
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 364 -p 1872 -ip 18721⤵PID:1816