Analysis
-
max time kernel
137s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 13:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6b2b039b89744a6255648dfe508015c314fab53ba15a2d608aef4e7b8d4e7cfb.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
6b2b039b89744a6255648dfe508015c314fab53ba15a2d608aef4e7b8d4e7cfb.dll
-
Size
1.2MB
-
MD5
8464320f298b587dbf83d6e3c27dafb6
-
SHA1
b195619994daf538802f904c96a6129e66f08698
-
SHA256
6b2b039b89744a6255648dfe508015c314fab53ba15a2d608aef4e7b8d4e7cfb
-
SHA512
fd03b55563d6cffbeb06615583c7b2ac1a86e01ee3b535d58c8f1f197d73ee6048668a45d7b9fe0a91bc083b56eaf8a3004105b3ef56c116221e85cdf96e15fe
-
SSDEEP
24576:V88Kjwqgo6dmg6XKZz0AUfOwZbB2aBnRLI151E/BgXRzyCF7z7v3:u7+ZU3TODE/CdP3
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4028 1880 WerFault.exe 29
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6b2b039b89744a6255648dfe508015c314fab53ba15a2d608aef4e7b8d4e7cfb.dll,#11⤵PID:1880
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1880 -s 3282⤵
- Program crash
PID:4028
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 456 -p 1880 -ip 18801⤵PID:2288