Analysis
-
max time kernel
95s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2023 16:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8c997b0bd939fee1b206992c84a6c0566d01bdc40e01fe836c4da069115d014f.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
8c997b0bd939fee1b206992c84a6c0566d01bdc40e01fe836c4da069115d014f.dll
-
Size
1.2MB
-
MD5
a518891e0b46416306cfb2caa19c9029
-
SHA1
0b0c90a8c96a448ad4871da6a1674d5240f64090
-
SHA256
8c997b0bd939fee1b206992c84a6c0566d01bdc40e01fe836c4da069115d014f
-
SHA512
7288418bfd44677b53075779ad94a64a85633b9f05f4cf254f26486451dc825e0157eb34718af142a1a1c4ad7c3f0fc65508d0bce690b6d31e0a6469017af3e4
-
SSDEEP
24576:UDcEKh1b+t2rVumJqHhWdgGzjNwT2t/OMgy/IgokjpkVb404EyIaNedT:EmdjJqWgMjEOQVVsMyIaET
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2044 4804 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\8c997b0bd939fee1b206992c84a6c0566d01bdc40e01fe836c4da069115d014f.dll,#11⤵PID:4804
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4804 -s 3282⤵
- Program crash
PID:2044
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 460 -p 4804 -ip 48041⤵PID:4232