Analysis
-
max time kernel
145s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2023, 18:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0fede29dc5d0fa338037f8be2c6f399289c6b64197c5ffa2379354de3deca6bd.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
0fede29dc5d0fa338037f8be2c6f399289c6b64197c5ffa2379354de3deca6bd.dll
-
Size
1.2MB
-
MD5
b535a8daf27041b5e8dcc119a78f22f9
-
SHA1
ac00336956d212bef345894ba871d7cf5c453837
-
SHA256
0fede29dc5d0fa338037f8be2c6f399289c6b64197c5ffa2379354de3deca6bd
-
SHA512
d26be183c37717b815d8a59c701299fbed372ae1a7bd69959fd1d1af7f759083610318ac45ce87fbb2a0e35c6b41881561a43e5193c23315d7c2eb49cca89a9e
-
SSDEEP
24576:2l70x0gt0nxZLHfHulAR02Sq2lr5ljm/91JGvd+mmiSyZHpVMXD+mwCyWJDz:J/I/OlARNSq2ShiVH7oZlJDz
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3084 1712 WerFault.exe 76
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0fede29dc5d0fa338037f8be2c6f399289c6b64197c5ffa2379354de3deca6bd.dll,#11⤵PID:1712
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1712 -s 3282⤵
- Program crash
PID:3084
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 1712 -ip 17121⤵PID:1240