Analysis
-
max time kernel
59s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 01:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fdbd58ecb5f47ff7c0c807ab0473856eb26119a86dc51917862d0337b2d57470.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
fdbd58ecb5f47ff7c0c807ab0473856eb26119a86dc51917862d0337b2d57470.dll
-
Size
1.2MB
-
MD5
77ce21724d240e9435f56fe3536a9c14
-
SHA1
9e6d77b31176631b9e3f5ff439ba574ad366b99e
-
SHA256
fdbd58ecb5f47ff7c0c807ab0473856eb26119a86dc51917862d0337b2d57470
-
SHA512
59a580c3016a2b269027cc8b6549e16cb7b8ac16ea4013cfda47924d1d99b6487f7d239f521c6f0923bb09ca6df8f42f2d7627f37cb050037913fbe2e15ced31
-
SSDEEP
24576:TOlLPS/snbefBkOWG18PI3NuAb669Neky+pHb52mkTm3y2djZbx1xAXO:qt1p0GcppvQgy2dtJ1
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1440 1808 WerFault.exe 47
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\fdbd58ecb5f47ff7c0c807ab0473856eb26119a86dc51917862d0337b2d57470.dll,#11⤵PID:1808
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1808 -s 3282⤵
- Program crash
PID:1440
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 1808 -ip 18081⤵PID:4212