Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 05:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eb7d552ca4c78fe8f024d412e7b1467a3b0129a06d8f2a1bdfc56ed56dd1cef7.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
eb7d552ca4c78fe8f024d412e7b1467a3b0129a06d8f2a1bdfc56ed56dd1cef7.dll
-
Size
1.2MB
-
MD5
4116dbfe69feb96e9b0b12da0609f00f
-
SHA1
f76ee7cc5dfb641bf5968b19b925a5180de5c5d8
-
SHA256
eb7d552ca4c78fe8f024d412e7b1467a3b0129a06d8f2a1bdfc56ed56dd1cef7
-
SHA512
3e34935eb6f9dd0158dbdffc1bdf4a39d060aa85c58a8d6c9432fe08c9147e9cc5c60228e1c3bbb3c419d358c39bd8f55adab1d8992c3f133edc51245bac8afc
-
SSDEEP
24576:TOlLPS/snbefBkOWG18PI3NuAb669Neky+pHb52mkTm3y2djZbx1xAXU:qt1p0GcppvQgy2dtJl
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2320 4528 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\eb7d552ca4c78fe8f024d412e7b1467a3b0129a06d8f2a1bdfc56ed56dd1cef7.dll,#11⤵PID:4528
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4528 -s 3282⤵
- Program crash
PID:2320
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 376 -p 4528 -ip 45281⤵PID:1416