Analysis
-
max time kernel
75s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
26-05-2023 11:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ea3bc8ec5a7b64c67897bfd6edba221d4c066dbd1905c39852bd3bd55ec965f1.dll
Resource
win10v2004-20230221-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
ea3bc8ec5a7b64c67897bfd6edba221d4c066dbd1905c39852bd3bd55ec965f1.dll
-
Size
1.2MB
-
MD5
f6c74d69879cf1cb453a85cf10f29121
-
SHA1
98f5251cc0d0a464859545892ac27ef531adead1
-
SHA256
ea3bc8ec5a7b64c67897bfd6edba221d4c066dbd1905c39852bd3bd55ec965f1
-
SHA512
71b9943c80ba79415dbbeec7023eeb02f1b33a5406bd1237458c945ebfcf766bf2f2414456765682516e166c58e80fcbb6f6a8539f760d8f233f90a0dcb265da
-
SSDEEP
24576:JRnTYEAEZO+waOunLnSqVPS5kGWymbofA5UygFVvE6LusNO5QP:aglnGqKmboPv1LusYyP
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 5056 4648 WerFault.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ea3bc8ec5a7b64c67897bfd6edba221d4c066dbd1905c39852bd3bd55ec965f1.dll,#11⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4648 -s 3282⤵
- Program crash
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 460 -p 4648 -ip 46481⤵