Analysis
-
max time kernel
143s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 08:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8de2454fe1f56860d6ae42787c16f1843fd1f03f246bdefdd438bd48a6242f08.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
8de2454fe1f56860d6ae42787c16f1843fd1f03f246bdefdd438bd48a6242f08.dll
-
Size
1.2MB
-
MD5
1b8997d1e346dc14bd78604508ea5c95
-
SHA1
cae1b86a74a58f4e2e0c894c6b3da78e09a3a306
-
SHA256
8de2454fe1f56860d6ae42787c16f1843fd1f03f246bdefdd438bd48a6242f08
-
SHA512
f693e940e7c5e37ee517e3a93b7191b871f0dc5a4d7e9cb9e6b9401098fd54e29ce0a70d2e15c299c7f1ef3f8b06799f381cff9b8ac036e6e0f8d541a650e298
-
SSDEEP
24576:TOlLPS/snbefBkOWG18PI3NuAb669Neky+pHb52mkTm3y2djZbx1xAXG:qt1p0GcppvQgy2dtJl
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1192 1284 WerFault.exe 73
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\8de2454fe1f56860d6ae42787c16f1843fd1f03f246bdefdd438bd48a6242f08.dll,#11⤵PID:1284
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1284 -s 3282⤵
- Program crash
PID:1192
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 460 -p 1284 -ip 12841⤵PID:3832