Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 21:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ac0a486ad1641719b7862a0238d5148e57e93c6014d71c249d3b40ad77ad2573.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
ac0a486ad1641719b7862a0238d5148e57e93c6014d71c249d3b40ad77ad2573.dll
-
Size
1.2MB
-
MD5
6ba2c2e256ccfd19439abe0a18c7aeaf
-
SHA1
53fb44e7c58a7693e153ccd96b58020963b2c96a
-
SHA256
ac0a486ad1641719b7862a0238d5148e57e93c6014d71c249d3b40ad77ad2573
-
SHA512
52c7e6aff91dda0a671576cba0d2781652520521ad5ae5bb44853e06e961b04975aca266a810603f232b091f62a21f1607a1b302a69f8e934fd14f824f61791d
-
SSDEEP
24576:2l70x0gt0nxZLHfHulAR02Sq2lr5ljm/91JGvd+mmiSyZHpVMXD+mwCyWJDg:J/I/OlARNSq2ShiVH7oZlJDg
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2084 4452 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ac0a486ad1641719b7862a0238d5148e57e93c6014d71c249d3b40ad77ad2573.dll,#11⤵PID:4452
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4452 -s 3282⤵
- Program crash
PID:2084
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 436 -p 4452 -ip 44521⤵PID:2820