Analysis
-
max time kernel
99s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21-05-2023 17:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b2ab4cb6098ee93213fb3a5633b2537e5d4642edff00d96ec5e0a1f9caa5f8ce.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
b2ab4cb6098ee93213fb3a5633b2537e5d4642edff00d96ec5e0a1f9caa5f8ce.dll
-
Size
1.2MB
-
MD5
9594ff9f231eebddd95da95d299c9ff2
-
SHA1
7cae7a04cd7394f1dd2c5aade07d86421e6624fe
-
SHA256
b2ab4cb6098ee93213fb3a5633b2537e5d4642edff00d96ec5e0a1f9caa5f8ce
-
SHA512
5bf6f5268bef4fcb7499c263cdde77e536b41431cd8b8018f126d38f02910a8ada681ab8dc3678f930fd95c09bdacded702184c06c4ca1c79af6cd15cda8389a
-
SSDEEP
24576:DV0UU15cjJZQl3+S+sv6QCQEmwyhFz/1azp3Olzdd+B4q:Vw5L+h1nWk3Wzv8
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2052 2108 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\b2ab4cb6098ee93213fb3a5633b2537e5d4642edff00d96ec5e0a1f9caa5f8ce.dll,#11⤵PID:2108
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2108 -s 3282⤵
- Program crash
PID:2052
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 420 -p 2108 -ip 21081⤵PID:3512