Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 14:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e3cd74f20e32ed4158c6217fe18509e44a8ddb543b25e100f47b4e8dafda62ae.dll
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
-
Target
e3cd74f20e32ed4158c6217fe18509e44a8ddb543b25e100f47b4e8dafda62ae.dll
-
Size
1.2MB
-
MD5
dcc0cf65731f8cdb41b7c07bd1d89d4f
-
SHA1
6abda3b02bfe7e83e6b4b158498b999c29b550bd
-
SHA256
e3cd74f20e32ed4158c6217fe18509e44a8ddb543b25e100f47b4e8dafda62ae
-
SHA512
563bca31d93f7585dad730d10647f01df246f077ec6704694f1b07ada477d9da9f8082b236e1ea651da609f71a5672e725355eaf5b1f48f24d1f762de8e7c703
-
SSDEEP
24576:JRnTYEAEZO+waOunLnSqVPS5kGWymbofA5UygFVvE6LusNO5QZ:aglnGqKmboPv1LusYyZ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2772 2932 WerFault.exe 60
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e3cd74f20e32ed4158c6217fe18509e44a8ddb543b25e100f47b4e8dafda62ae.dll,#11⤵PID:2932
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2932 -s 3282⤵
- Program crash
PID:2772
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 176 -p 2932 -ip 29321⤵PID:3824