Analysis
-
max time kernel
134s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 06:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
597148a60fbd83df47ba8c66078c2e067962d1f69516e83506d8dec0d541b279.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
597148a60fbd83df47ba8c66078c2e067962d1f69516e83506d8dec0d541b279.dll
-
Size
1.2MB
-
MD5
1a3e03ef37fdf554a871f4f5f0d16061
-
SHA1
da91e22af41f0e5371590cb1264bc25f8faf2ff1
-
SHA256
597148a60fbd83df47ba8c66078c2e067962d1f69516e83506d8dec0d541b279
-
SHA512
2a2ad4556121b155cc10c14d0b9445463a2b3de3e57bfd6f90bcd3b5c0dc49774424a6e27466e5ad0cd74ca4d7016da19658403e9ef13c8505f0008cc5ec928d
-
SSDEEP
24576:bDuxKmI0rJwMcB7T/HEbLtg25N9n9usMlBk1aIurzG+lbGzZrxGNV6IOfTEV:x1dTvEHtr5N94Zpu9wXmEV
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4812 4940 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\597148a60fbd83df47ba8c66078c2e067962d1f69516e83506d8dec0d541b279.dll,#11⤵PID:4940
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4940 -s 3282⤵
- Program crash
PID:4812
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 364 -p 4940 -ip 49401⤵PID:4904