Analysis
-
max time kernel
117s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
26-05-2023 11:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fc94eccb8f4bba682cf68e986fa3091719264e4f3afeca27807d945f8017b809.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
fc94eccb8f4bba682cf68e986fa3091719264e4f3afeca27807d945f8017b809.dll
-
Size
1.2MB
-
MD5
7e19a50b3af1d148afd19c7bfeb0b0f2
-
SHA1
305820891f0a144709902ce139bbc2bd7f87bc84
-
SHA256
fc94eccb8f4bba682cf68e986fa3091719264e4f3afeca27807d945f8017b809
-
SHA512
14dc9b9d49cf63773f738cc1db1860401e21f7b6fc25b51c4540431c5b28af42f16a86355f1049aa16c8affc228543532c55ae6ace43f17f24dffe48fbdf1122
-
SSDEEP
24576:JRnTYEAEZO+waOunLnSqVPS5kGWymbofA5UygFVvE6LusNO5Qt:aglnGqKmboPv1LusYyt
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2172 1996 WerFault.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\fc94eccb8f4bba682cf68e986fa3091719264e4f3afeca27807d945f8017b809.dll,#11⤵PID:1996
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1996 -s 3282⤵
- Program crash
PID:2172
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 1996 -ip 19961⤵PID:4772