Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 04:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
540eb6a21706583a5f1793631fbf2449b29febad1a79e12fd3dcfebaa15f1ae1.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
540eb6a21706583a5f1793631fbf2449b29febad1a79e12fd3dcfebaa15f1ae1.dll
-
Size
1.2MB
-
MD5
5d0ad5d9aca9f06879f7833043821b13
-
SHA1
8ce23772024e45e50068ae1b7ccb1a30a1290e01
-
SHA256
540eb6a21706583a5f1793631fbf2449b29febad1a79e12fd3dcfebaa15f1ae1
-
SHA512
bbe88524ec514f6eddd767daf42378c78bf9049acf9d6d386a0a39c12978455e2c6d2eb603537faa7c6be425348588bc4d6563a116641d3be253028a7c70bb6c
-
SSDEEP
24576:pzjM6P4b6QbU4hhNTAgOFmM4KrYF3IT6B0UKjp6spB+7KuMHG53AQLwXVR8KseXk:C7f7TwNzSi2KuMHGnwXP8XSKOW
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1960 4504 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\540eb6a21706583a5f1793631fbf2449b29febad1a79e12fd3dcfebaa15f1ae1.dll,#11⤵PID:4504
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4504 -s 3322⤵
- Program crash
PID:1960
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 420 -p 4504 -ip 45041⤵PID:448