Analysis
-
max time kernel
140s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 08:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eb1d21433804788034facb3e6426ce178258e3bf2f31d87f3f538235d1e8549b.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
eb1d21433804788034facb3e6426ce178258e3bf2f31d87f3f538235d1e8549b.dll
-
Size
1.2MB
-
MD5
1c881a4b385eb4d5c1a21ba5667f3427
-
SHA1
3366b007beac8b654e26a713210d6fee5d4d13ed
-
SHA256
eb1d21433804788034facb3e6426ce178258e3bf2f31d87f3f538235d1e8549b
-
SHA512
73c5c7c24abba2a06dd722d308fa1d9085584e675388e60693e0c1cdcb0664640339ca1f485c0938674a435b8b4223b13cc45cdb72edcb9b2591a4e0dd9ae0a4
-
SSDEEP
24576:Gl86PviaAENUqqV554IvhzlFRUBqrjCuh7UiSjMDnpF21yR:QCjT5JRF6yIQ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5040 2364 WerFault.exe 61
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\eb1d21433804788034facb3e6426ce178258e3bf2f31d87f3f538235d1e8549b.dll,#11⤵PID:2364
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2364 -s 3282⤵
- Program crash
PID:5040
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 416 -p 2364 -ip 23641⤵PID:2040