Analysis
-
max time kernel
140s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 16:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c415182439d157a7d47b438f41402ecc09d57d47e170ba25ead16f0d6d256e7e.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
c415182439d157a7d47b438f41402ecc09d57d47e170ba25ead16f0d6d256e7e.dll
-
Size
1.2MB
-
MD5
46d56a49a9b84310de4f7057068b2531
-
SHA1
96cf8b9d0ec4fc3b051ce4c56aa1bcda57435e26
-
SHA256
c415182439d157a7d47b438f41402ecc09d57d47e170ba25ead16f0d6d256e7e
-
SHA512
2d1c2ef77d6324120d07c7ebef1c276fc54fb523d1ba04f562827ada2d1d52d75d8f2d79869e8ac140107a15552c7ceaf1135876126a3567afe45fcf56b8e394
-
SSDEEP
24576:4cwlGwp7kYYN856GZBjzxq0ILBriOL3qv9qJG0uKUPWqH8gK:4c6D485Ic9qMKU/Ho
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4028 1832 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c415182439d157a7d47b438f41402ecc09d57d47e170ba25ead16f0d6d256e7e.dll,#11⤵PID:1832
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1832 -s 3282⤵
- Program crash
PID:4028
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 456 -p 1832 -ip 18321⤵PID:2468