Analysis
-
max time kernel
106s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 04:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e0fe171e2ddf7a276ee38771f3ff98458609730d65acd3ba39a42899964a262c.dll
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
-
Target
e0fe171e2ddf7a276ee38771f3ff98458609730d65acd3ba39a42899964a262c.dll
-
Size
1.2MB
-
MD5
cb1300614f4d83510aafe683f5ec2f5e
-
SHA1
370ca1c09922607958beed9b12f4bd9f2570b27a
-
SHA256
e0fe171e2ddf7a276ee38771f3ff98458609730d65acd3ba39a42899964a262c
-
SHA512
93ee0ef742725e6a339bc9740a791f08b6a25ceeeb84263b37bf82bbbe23c97f832605617683f939ca0f4b6b378d66eeb60d49752969d1aaff0b09aa48c5c8d3
-
SSDEEP
24576:6nHJvLALXKgAosOT+MevrxfrtxvcZR3LpCS90KVjGaMOLLMO49Kx5:20K/TfrK9RT0N2
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2176 4416 WerFault.exe 64
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e0fe171e2ddf7a276ee38771f3ff98458609730d65acd3ba39a42899964a262c.dll,#11⤵PID:4416
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4416 -s 3282⤵
- Program crash
PID:2176
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 416 -p 4416 -ip 44161⤵PID:1492