Analysis
-
max time kernel
135s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2023, 16:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
76e20987fe88fb3fb75340c92d76b536513a6e9d91622abfbc01e8e238d4ac0c.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
76e20987fe88fb3fb75340c92d76b536513a6e9d91622abfbc01e8e238d4ac0c.dll
-
Size
1.2MB
-
MD5
85c8d7277e842efc863af153e818efb6
-
SHA1
11050729f343b2ea28a19ce0bf588ae73f341fe1
-
SHA256
76e20987fe88fb3fb75340c92d76b536513a6e9d91622abfbc01e8e238d4ac0c
-
SHA512
ae6dc576845f8c9f7ce4125be902a0142257250510db2ac458979cc6f6a2d35f49d27274a0f8b53e2db4d3ba3dca696b20e922ae160e543c862d3d912e30474b
-
SSDEEP
24576:RX2XuxPjBCdsjb/mwzOW2R1c527W6osp2fp7zVrwzeC:jx7BzOWclYplMSC
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3276 4804 WerFault.exe 41
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\76e20987fe88fb3fb75340c92d76b536513a6e9d91622abfbc01e8e238d4ac0c.dll,#11⤵PID:4804
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4804 -s 3282⤵
- Program crash
PID:3276
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 404 -p 4804 -ip 48041⤵PID:4720