Analysis
-
max time kernel
135s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
24-05-2023 11:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9c0b5d8d1cd4b23ce4594b858eba8eb782f00d8d2e174884f5b8263ffa9161dc.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
9c0b5d8d1cd4b23ce4594b858eba8eb782f00d8d2e174884f5b8263ffa9161dc.dll
-
Size
1.2MB
-
MD5
8bce930f5ad5cde5741560dc499f7e5c
-
SHA1
c3de928121387a956b5bf75ff2ae5babbdd744a4
-
SHA256
9c0b5d8d1cd4b23ce4594b858eba8eb782f00d8d2e174884f5b8263ffa9161dc
-
SHA512
984f2a03406026e30631dcd37ed2bb4656b886c93ba4e7d20ba0d25e5a60332db756a09314a3f5f881f8fc23821f065452be080e50923c0869d7a48eeb7b03eb
-
SSDEEP
24576:RvRuGh6hGMiKe5pZtBB8CwbQDHXTDEIWOSqpkzwCny:aNsNBB8RaEcCny
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3996 4636 WerFault.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\9c0b5d8d1cd4b23ce4594b858eba8eb782f00d8d2e174884f5b8263ffa9161dc.dll,#11⤵PID:4636
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4636 -s 3282⤵
- Program crash
PID:3996
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4636 -ip 46361⤵PID:5044