Analysis
-
max time kernel
144s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2023 16:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
62c798bd329d0fddb8762fc99d4c738647e89a55a8c242c726f66bf491c662f2.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
62c798bd329d0fddb8762fc99d4c738647e89a55a8c242c726f66bf491c662f2.dll
-
Size
1.2MB
-
MD5
1b036aae8710ee14925689e2d86a9733
-
SHA1
ab9c7995a48b821ee1e7ac5a138af1cc56ad4b36
-
SHA256
62c798bd329d0fddb8762fc99d4c738647e89a55a8c242c726f66bf491c662f2
-
SHA512
d0a1352cd65cd0f9f5aac206ff8733d6387a2239ca4361426cb8940fc3c8ce888ae10f1500e09319b5504a4897d24cc6d28668bbfbc635db4ddea34519174be1
-
SSDEEP
24576:jrZcCgifLC5yVOlFG1/V4WDfa+xtvzRCpZ9Vw7niWOGn:eS52+NGG
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1696 1220 WerFault.exe 52
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\62c798bd329d0fddb8762fc99d4c738647e89a55a8c242c726f66bf491c662f2.dll,#11⤵PID:1220
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1220 -s 3282⤵
- Program crash
PID:1696
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 1220 -ip 12201⤵PID:1472