Analysis
-
max time kernel
92s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 13:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4c35b6eb099e48e855fa8a22365cf2c268707860eff99d80166e1e217aed0cb7.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
4c35b6eb099e48e855fa8a22365cf2c268707860eff99d80166e1e217aed0cb7.dll
-
Size
1.2MB
-
MD5
82ee22d10ce02b2d3e3de39d1f198b7f
-
SHA1
dfc22ea76766d0cab04cfcf5129b8b9e15645346
-
SHA256
4c35b6eb099e48e855fa8a22365cf2c268707860eff99d80166e1e217aed0cb7
-
SHA512
85a40cd95c5e682382db8e9409338e698ef20a75767d05ea6068f3852935072d4526925da7690fdff4cede55b70ec24bfe24b0b8c0df56d6f7f6303d882ab007
-
SSDEEP
24576:hmJByBxUwi/uUy74InSKf290MFK7YnlAf46KE/eRLlBi303/Un1lrZQuwnHrrddI:02O+SKfQhvlB1v6rileRN
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1456 4804 WerFault.exe 61
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\4c35b6eb099e48e855fa8a22365cf2c268707860eff99d80166e1e217aed0cb7.dll,#11⤵PID:4804
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4804 -s 3282⤵
- Program crash
PID:1456
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4804 -ip 48041⤵PID:1240