Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2023 09:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f9c233215eeb2828a3c205246050967694633a596a36fe9f1e7aeead72933f07.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
f9c233215eeb2828a3c205246050967694633a596a36fe9f1e7aeead72933f07.dll
-
Size
1.2MB
-
MD5
e769dc87bdb117fe2f2e5c3afbd1ce51
-
SHA1
e0b48c0e15529ceb3ff013e2ebfa8b6a641d08c0
-
SHA256
f9c233215eeb2828a3c205246050967694633a596a36fe9f1e7aeead72933f07
-
SHA512
a976a98692486d2c62f6a3b21abd909c164a393e673baad9a3e7f81d67f74a881153dd04de437c9e7d089eb5354d8713bba9fa4fe4f4767df4f34d046e526f06
-
SSDEEP
24576:5XK6ZFu5DoLYiLgBoAFvEAvxm4i0uuxhJV8e11B:RS4/AFGeJ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4396 1716 WerFault.exe 82
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\f9c233215eeb2828a3c205246050967694633a596a36fe9f1e7aeead72933f07.dll,#11⤵PID:1716
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1716 -s 3282⤵
- Program crash
PID:4396
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 420 -p 1716 -ip 17161⤵PID:2612