Analysis
-
max time kernel
82s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 10:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
13cb6ed35b4414c56311b057fec30e2923c4e3af5ad85990b2b389fd7c9f3e4b.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
13cb6ed35b4414c56311b057fec30e2923c4e3af5ad85990b2b389fd7c9f3e4b.dll
-
Size
1.2MB
-
MD5
fed7cdacb89fea9c9c7502ed9e825043
-
SHA1
5773c950c90894fe9e3d63589bb1eca3f6a5acb7
-
SHA256
13cb6ed35b4414c56311b057fec30e2923c4e3af5ad85990b2b389fd7c9f3e4b
-
SHA512
557d00180dc4395006de0cdd2bf0c51179a96db0e2e18b3f0a43ef857debc6fb5e93b404a3dcbb4b98e42c450f954c03f1f42d689935fc82d355ea51d24a9445
-
SSDEEP
24576:hnFEQ39H3inchWuUJDRKU0F9nOXBn/Y6G63h:UUtADRWgQ6R
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2132 1600 WerFault.exe 70
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\13cb6ed35b4414c56311b057fec30e2923c4e3af5ad85990b2b389fd7c9f3e4b.dll,#11⤵PID:1600
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1600 -s 3282⤵
- Program crash
PID:2132
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 184 -p 1600 -ip 16001⤵PID:1524