Analysis
-
max time kernel
135s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 11:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f3571124e258fe10672860d9f0323ef1fdad976e0e690b59a213dd8634ab3521.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
f3571124e258fe10672860d9f0323ef1fdad976e0e690b59a213dd8634ab3521.dll
-
Size
1.2MB
-
MD5
1f8e2a5750e34f42dab845cb229a8a47
-
SHA1
0d4ddabdd87ce7f37348095bb210abc2602c1f27
-
SHA256
f3571124e258fe10672860d9f0323ef1fdad976e0e690b59a213dd8634ab3521
-
SHA512
61bba250d191e2b4c2141a4e4bfd909ceaf3397ed753f300af520f6c1ac0117e6b495613710df09df1251fc6aa8801d783564ef4d63ebd26923f60f373e6a0f0
-
SSDEEP
24576:+f1mNgvhcTL+puoCTrQwYKUkzGE0MbyvDPZGz7VlWnJ0iKS0tMNiU:dQS+WvVUxle5U
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4928 3832 WerFault.exe 77
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\f3571124e258fe10672860d9f0323ef1fdad976e0e690b59a213dd8634ab3521.dll,#11⤵PID:3832
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3832 -s 3282⤵
- Program crash
PID:4928
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 436 -p 3832 -ip 38321⤵PID:1192