Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2023 11:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2187edf3a7bc66acd0601da77d536ff62633be23228323d4f53d4629a89165ba.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2187edf3a7bc66acd0601da77d536ff62633be23228323d4f53d4629a89165ba.dll
-
Size
1.2MB
-
MD5
a677f308863ff0b09e915315891914af
-
SHA1
9611dce2de45bc2f004a15389828b6c597729c09
-
SHA256
2187edf3a7bc66acd0601da77d536ff62633be23228323d4f53d4629a89165ba
-
SHA512
5aeff6615b6a9ad30cd6a72b79c7cf158eaa8d56a84669bfb13a0ff60906c621ee7be5797a3eb610b252e484828291f333fc369dc868c56f8aabf342aa5afccf
-
SSDEEP
24576:5XK6ZFu5DoLYiLgBoAFvEAvxm4i0uuxhJV8e11l:RS4/AFGet
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5040 4112 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2187edf3a7bc66acd0601da77d536ff62633be23228323d4f53d4629a89165ba.dll,#11⤵PID:4112
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4112 -s 2882⤵
- Program crash
PID:5040
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4112 -ip 41121⤵PID:4624