Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 10:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
258cab5653710874c58d3ff715fc5c5fef9e57e228f6421580f5cf5d74ea9e1f.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
258cab5653710874c58d3ff715fc5c5fef9e57e228f6421580f5cf5d74ea9e1f.dll
-
Size
1.2MB
-
MD5
202c56c40c9f658fc63455a9c9426ba2
-
SHA1
9a319f7031dd07a4b1e65a245f5377d103976c45
-
SHA256
258cab5653710874c58d3ff715fc5c5fef9e57e228f6421580f5cf5d74ea9e1f
-
SHA512
4084693966cc234d7254cec257f230374f58cc70d441cdbca94aed5a9fe55e5b13589e245c86e40200669a1551e3ce5d9a716a86fc1ac7e32d19ff5cbe86d18c
-
SSDEEP
24576:jtl0RPQ02pA6bHvn6/yzI+bdIP7P6d4SitpwqrK1AmIfGH0qh/OM/k:UGpS6RQSi56lthG
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1188 4532 WerFault.exe 78
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\258cab5653710874c58d3ff715fc5c5fef9e57e228f6421580f5cf5d74ea9e1f.dll,#11⤵PID:4532
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4532 -s 3282⤵
- Program crash
PID:1188
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 364 -p 4532 -ip 45321⤵PID:4552