Analysis
-
max time kernel
87s -
max time network
90s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 17:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3ba0d299a6a520d3d0f32770847f8becf1e47bc344703b01991b0e02ac6f45a1.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
3ba0d299a6a520d3d0f32770847f8becf1e47bc344703b01991b0e02ac6f45a1.dll
-
Size
1.2MB
-
MD5
602ca0fc68ffdb69b563529d069d6832
-
SHA1
6bc434d698689cc9de3695367b41388c784b3f68
-
SHA256
3ba0d299a6a520d3d0f32770847f8becf1e47bc344703b01991b0e02ac6f45a1
-
SHA512
e8dce0054879c7fde8fc95cfe9b92c7ea2a825fca0adc383cecae38d2bdef5f5a959b833bb8599a9e9d23757417ac344f554ca32298e39cab4487e5f6e7f0ad0
-
SSDEEP
24576:lwOhCPykWGGrYL1hb4LPRAMXLXuw2tL0IGrkNBxgvx3FWlDV:9TKhL4LP+AMtBoAV
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5060 3888 WerFault.exe 79
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3ba0d299a6a520d3d0f32770847f8becf1e47bc344703b01991b0e02ac6f45a1.dll,#11⤵PID:3888
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3888 -s 3282⤵
- Program crash
PID:5060
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 412 -p 3888 -ip 38881⤵PID:412