Analysis
-
max time kernel
60s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 16:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
81c065557afa684a4ff6ea70d19f8eb3d9af0d5d92fdfdbffe2705ce26d4e416.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
81c065557afa684a4ff6ea70d19f8eb3d9af0d5d92fdfdbffe2705ce26d4e416.dll
-
Size
1.2MB
-
MD5
1edaf33a3ee90d13ccb6729d4488a5d4
-
SHA1
82b2e73ad90243c071538990d5ec1eae83e0baee
-
SHA256
81c065557afa684a4ff6ea70d19f8eb3d9af0d5d92fdfdbffe2705ce26d4e416
-
SHA512
bffb742a71954437e8935d2d2e0916154c495857e08f13cacfb01f8c9ef22891e356b9a2b25afbd7778065c0b00a21845c71af88cc8b4e7addc486049388c747
-
SSDEEP
24576:hLSd9kmW5Z/0L2s/lOvZm/K0s56BWIVMyaaO2HrOBV8eFc2zJdhWjtQ/:Kv51/lmasFxFmtM
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4596 2516 WerFault.exe 41
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\81c065557afa684a4ff6ea70d19f8eb3d9af0d5d92fdfdbffe2705ce26d4e416.dll,#11⤵PID:2516
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2516 -s 3282⤵
- Program crash
PID:4596
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 460 -p 2516 -ip 25161⤵PID:1264