Analysis
-
max time kernel
135s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 06:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4aef66ef5202144f664eea261f1f52c509bac91bc712fccbc25eea3394b528b3.dll
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
-
Target
4aef66ef5202144f664eea261f1f52c509bac91bc712fccbc25eea3394b528b3.dll
-
Size
1.2MB
-
MD5
aa26f75a401af5fd0069498e39576bf8
-
SHA1
af0f8200deef7a20dfc6bc0224bd3e9494f23852
-
SHA256
4aef66ef5202144f664eea261f1f52c509bac91bc712fccbc25eea3394b528b3
-
SHA512
69b835970fd151cfd80ab80f82a4ef9181f7ca3273f2828f5e20104ca7f3607154353070758c7f33189ce0d12e03550f28ee965eb78251dbfde101e9ee9fe32a
-
SSDEEP
24576:JRnTYEAEZO+waOunLnSqVPS5kGWymbofA5UygFVvE6LusNO5QI:aglnGqKmboPv1LusYyI
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1600 1932 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\4aef66ef5202144f664eea261f1f52c509bac91bc712fccbc25eea3394b528b3.dll,#11⤵PID:1932
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1932 -s 3282⤵
- Program crash
PID:1600
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 188 -p 1932 -ip 19321⤵PID:4912