Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2023 18:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ace540832696bd50887c7916e05ddb54d901f72f60918278509d5d1252286be5.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
ace540832696bd50887c7916e05ddb54d901f72f60918278509d5d1252286be5.dll
-
Size
1.2MB
-
MD5
dd7e59ce9b6b7de5ab19cb51016dd6b5
-
SHA1
40e69f12d8f63ac5587281d5f04d1b462f4445c3
-
SHA256
ace540832696bd50887c7916e05ddb54d901f72f60918278509d5d1252286be5
-
SHA512
2f0ee6a56d8e9f02f638d6ffacb5c99f84d9fb03a5c64ba3e43ec8e5c54440484f30c89a15cc5447c2b58736470c6cc0fafe56a458821ef6de252558815a33aa
-
SSDEEP
24576:4cwlGwp7kYYN856GZBjzxq0ILBriOL3qv9qJG0uKUPWqH8gT:4c6D485Ic9qMKU/Hd
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2596 2912 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ace540832696bd50887c7916e05ddb54d901f72f60918278509d5d1252286be5.dll,#11⤵PID:2912
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2912 -s 3282⤵
- Program crash
PID:2596
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 376 -p 2912 -ip 29121⤵PID:4708