Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
26/05/2023, 15:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9d18f0f5da66a9d343d10135a14173cc91757daad8773942e7c9aafbaf96210a.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
9d18f0f5da66a9d343d10135a14173cc91757daad8773942e7c9aafbaf96210a.dll
-
Size
1.2MB
-
MD5
dd0db822f7835ebb070e75f075bf7921
-
SHA1
84fd44e18a7417fae0986423aa9412b1e8427e3c
-
SHA256
9d18f0f5da66a9d343d10135a14173cc91757daad8773942e7c9aafbaf96210a
-
SHA512
3a90c9f5c270346c3eb1bdb0384087dc52c6222a9dc534cd6afa4262be440024cbd7422535978d7047fa03cf8fd355c6c44d6fb9dd3c59ff5dfb335b4e265038
-
SSDEEP
24576:hmJByBxUwi/uUy74InSKf290MFK7YnlAf46KE/eRLlBi303/Un1lrZQuwnHrrddn:02O+SKfQhvlB1v6rileR+
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4232 3896 WerFault.exe 53
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\9d18f0f5da66a9d343d10135a14173cc91757daad8773942e7c9aafbaf96210a.dll,#11⤵PID:3896
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3896 -s 3282⤵
- Program crash
PID:4232
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 460 -p 3896 -ip 38961⤵PID:3900