Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 05:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1e33d2bfd07172257068e177e79d8519ed5d3ed1192e6a78a9a4c54c048810c9.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
1e33d2bfd07172257068e177e79d8519ed5d3ed1192e6a78a9a4c54c048810c9.dll
-
Size
1.2MB
-
MD5
a64ff51cb5d4015c8c443f8e6e6b07b7
-
SHA1
597512994d2ae8c9b141d61de889d6114bb4daaf
-
SHA256
1e33d2bfd07172257068e177e79d8519ed5d3ed1192e6a78a9a4c54c048810c9
-
SHA512
61e497c9ba51030886edfae414d2a271503584970c4555967d4c42704771eb4c894156dde070744a5e4c1368e5bb22a8f9ea7b06b78fd72891ef436471f15ada
-
SSDEEP
24576:3FCcW8RT9F67gwL3k2UeOL9HnUUCexncTD+1z4IHN/HJ:PIr3jUeOfc3+TZp
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4988 4124 WerFault.exe 49
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1e33d2bfd07172257068e177e79d8519ed5d3ed1192e6a78a9a4c54c048810c9.dll,#11⤵PID:4124
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4124 -s 3282⤵
- Program crash
PID:4988
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 176 -p 4124 -ip 41241⤵PID:1096