Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 04:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c97b5ae6e6668e551c6d1cb86e23e811a6d17bd6a14c50ead2949319c0e86c57.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
c97b5ae6e6668e551c6d1cb86e23e811a6d17bd6a14c50ead2949319c0e86c57.dll
-
Size
1.2MB
-
MD5
22dd4375640990e55a36e067d4c645d1
-
SHA1
58238094c00d36dee69a7d0e6f3e1d00275ac301
-
SHA256
c97b5ae6e6668e551c6d1cb86e23e811a6d17bd6a14c50ead2949319c0e86c57
-
SHA512
2df2e6db554e27063417d538f998b711f8a1a86fffc4c335715cdf93edfde466f4fccec9ed0ad6114939b477534d258f94aed19f29e4ed097381e4b58df5eefe
-
SSDEEP
24576:UDcEKh1b+t2rVumJqHhWdgGzjNwT2t/OMgy/IgokjpkVb404EyIaNedm:EmdjJqWgMjEOQVVsMyIaEm
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1856 4952 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c97b5ae6e6668e551c6d1cb86e23e811a6d17bd6a14c50ead2949319c0e86c57.dll,#11⤵PID:4952
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4952 -s 3282⤵
- Program crash
PID:1856
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 460 -p 4952 -ip 49521⤵PID:952