Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 02:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
201866bd3c15e18af793acb8b3d7ac26036196373a0342d369e0fb331ff87a8f.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
201866bd3c15e18af793acb8b3d7ac26036196373a0342d369e0fb331ff87a8f.dll
-
Size
1.2MB
-
MD5
57e667eab5aaae84911546c0272b098b
-
SHA1
3a4a62c79d8c01c74ffd8e654c7dadad1e494657
-
SHA256
201866bd3c15e18af793acb8b3d7ac26036196373a0342d369e0fb331ff87a8f
-
SHA512
c2a8f17f3bfd6c80c8dd9cd347205bf4656d31a43dd8206072a98229387f2f3521016f8fbef21a4055f13028b066360a7608579b3edc87d90572ed41e203ef23
-
SSDEEP
24576:SxOU/7+LUu4af1WAiwdwjUWHWQuONnh7AC2Dq+FRPa8DacrDSs:YKVvxa4s0HBacis
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3524 3004 WerFault.exe 26
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\201866bd3c15e18af793acb8b3d7ac26036196373a0342d369e0fb331ff87a8f.dll,#11⤵PID:3004
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3004 -s 3282⤵
- Program crash
PID:3524
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 416 -p 3004 -ip 30041⤵PID:4236