Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21-05-2023 04:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d3c6f71ecd7ebd74f116948897db8cad0406965463577115d50094b69f77e6de.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
d3c6f71ecd7ebd74f116948897db8cad0406965463577115d50094b69f77e6de.dll
-
Size
1.2MB
-
MD5
d0279ed4a23f2897e9e38cbf2d265999
-
SHA1
89b77acc31df792ba9e49fb7fc5bb5d187a5a1de
-
SHA256
d3c6f71ecd7ebd74f116948897db8cad0406965463577115d50094b69f77e6de
-
SHA512
94f0bda8215f20ce8e82b169eb95e3d45f0290f3f11396c3ac30e3f1f3cc5d6ef22e650282326c05cb009395b297b0feb64c2b59a30a1ac27ae9a41e599aae63
-
SSDEEP
24576:jrZcCgifLC5yVOlFG1/V4WDfa+xtvzRCpZ9Vw7niWOGw:eS52+NGb
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3816 1400 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d3c6f71ecd7ebd74f116948897db8cad0406965463577115d50094b69f77e6de.dll,#11⤵PID:1400
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1400 -s 3282⤵
- Program crash
PID:3816
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 1400 -ip 14001⤵PID:640