Analysis
-
max time kernel
84s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 21:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
581a9a4f52fa8741bcb6d2538a3eb66cc9b0c997145c20cb202aed5aeaab84a1.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
581a9a4f52fa8741bcb6d2538a3eb66cc9b0c997145c20cb202aed5aeaab84a1.dll
-
Size
1.2MB
-
MD5
95226bbd50b1f6eeb0d17cffb15a5490
-
SHA1
059b475eb15ddb363a6d36a9b2313d3608cea8c7
-
SHA256
581a9a4f52fa8741bcb6d2538a3eb66cc9b0c997145c20cb202aed5aeaab84a1
-
SHA512
86e806e63f539c6e51fc0166f604aae58bbca90074eb565ed0408aabe28c16d0473bb98795e1d9f8a582820be84e64d5f09cec20eadb6eb34d0b1057f0cea110
-
SSDEEP
24576:bDuxKmI0rJwMcB7T/HEbLtg25N9n9usMlBk1aIurzG+lbGzZrxGNV6IOfTEu:x1dTvEHtr5N94Zpu9wXmEu
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2828 2212 WerFault.exe 86
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\581a9a4f52fa8741bcb6d2538a3eb66cc9b0c997145c20cb202aed5aeaab84a1.dll,#11⤵PID:2212
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2212 -s 3282⤵
- Program crash
PID:2828
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 416 -p 2212 -ip 22121⤵PID:1676