Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 01:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c206704eb4b26e2cfbdbc0d860d77bd469bb1ba626a2ba908ba9709963d4d959.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
c206704eb4b26e2cfbdbc0d860d77bd469bb1ba626a2ba908ba9709963d4d959.dll
-
Size
1.2MB
-
MD5
d7cde73b88766ba61415874f3c793ef2
-
SHA1
943026515544bd60fd7c282998b9b46c17e8b6a9
-
SHA256
c206704eb4b26e2cfbdbc0d860d77bd469bb1ba626a2ba908ba9709963d4d959
-
SHA512
df2d8a3426b67d8bc90b8bd3bf9d73f2194a2d3ddd71ee61dae767138b5c74737c978aa5a7269154a95b1a66be1c461c55dbd0a7f54b505590566388207d278c
-
SSDEEP
24576:RX2XuxPjBCdsjb/mwzOW2R1c527W6osp2fp7zVrwze1:jx7BzOWclYplMS1
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1472 2264 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c206704eb4b26e2cfbdbc0d860d77bd469bb1ba626a2ba908ba9709963d4d959.dll,#11⤵PID:2264
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2264 -s 3282⤵
- Program crash
PID:1472
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 452 -p 2264 -ip 22641⤵PID:4376