Analysis
-
max time kernel
102s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 01:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
35830521b1e7d108661f06451f65b62ac95f8713ed2d2b9724e418d320d5d1d8.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
35830521b1e7d108661f06451f65b62ac95f8713ed2d2b9724e418d320d5d1d8.dll
-
Size
1.2MB
-
MD5
75fad9f6fa62b2231d9698b83f6ea092
-
SHA1
ea1b3460efacdc8766098281f32f94e2053fe43b
-
SHA256
35830521b1e7d108661f06451f65b62ac95f8713ed2d2b9724e418d320d5d1d8
-
SHA512
713df027d6948b8b3d2a8df1601917b585b7c27cb89ce0e90c6474becbaf97eb3f8963f34e10a01b7434dd795a60e764fd6659bad6af7c490db82c9f61fba748
-
SSDEEP
24576:f/AxL2HrN03HVkLI/LcnghFdk57CpCK/VrQtkEE9UYYkvzF:mwYI2wghc5q/GtkEAsKF
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3728 5008 WerFault.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\35830521b1e7d108661f06451f65b62ac95f8713ed2d2b9724e418d320d5d1d8.dll,#11⤵PID:5008
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 5008 -s 3282⤵
- Program crash
PID:3728
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 452 -p 5008 -ip 50081⤵PID:4976