Analysis
-
max time kernel
135s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/05/2023, 18:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2e5635b9edb5ccb0532c8d4a873576ae19affb82d81abb29e2a88b8645760d36.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
2e5635b9edb5ccb0532c8d4a873576ae19affb82d81abb29e2a88b8645760d36.dll
-
Size
1.2MB
-
MD5
7a74d1a60dc560b894a5acb4a80aadbe
-
SHA1
1a2842345a2336d5fd27f0b45933ef72aa54137a
-
SHA256
2e5635b9edb5ccb0532c8d4a873576ae19affb82d81abb29e2a88b8645760d36
-
SHA512
f180e957f15cff98fa2f7e278f2012b81f3739d24663a34667ff872bb53e30d0809c56bc3a49722ce005acfdae278746d73a24abf66d7b1ac5de75c6f6b2ceae
-
SSDEEP
24576:6nHJvLALXKgAosOT+MevrxfrtxvcZR3LpCS90KVjGaMOLLMO49Kx6:20K/TfrK9RT0NB
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1108 4492 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2e5635b9edb5ccb0532c8d4a873576ae19affb82d81abb29e2a88b8645760d36.dll,#11⤵PID:4492
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4492 -s 3282⤵
- Program crash
PID:1108
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 404 -p 4492 -ip 44921⤵PID:3524