Analysis
-
max time kernel
91s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 02:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
689502b451d7b1a5787646c13de71e2c896e5947de17069f786c56b0cb02189a.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
689502b451d7b1a5787646c13de71e2c896e5947de17069f786c56b0cb02189a.dll
-
Size
1.2MB
-
MD5
11dfb781d8be8e949f2045418f0ce148
-
SHA1
da9143e42e8eb5a7fa0cf1b276bd8add85687f0a
-
SHA256
689502b451d7b1a5787646c13de71e2c896e5947de17069f786c56b0cb02189a
-
SHA512
bff673d061db58f1b2cbbf57245a1e359bbb56dc1016435a31acd29eb1be919fb3213c34b102c03f26f799de06bbd495447466136b22be0a93865367db447caf
-
SSDEEP
24576:f/AxL2HrN03HVkLI/LcnghFdk57CpCK/VrQtkEE9UYYkvzf:mwYI2wghc5q/GtkEAsKf
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3456 3140 WerFault.exe 46
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\689502b451d7b1a5787646c13de71e2c896e5947de17069f786c56b0cb02189a.dll,#11⤵PID:3140
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3140 -s 3282⤵
- Program crash
PID:3456
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 432 -p 3140 -ip 31401⤵PID:3876