Analysis
-
max time kernel
152s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
26/05/2023, 18:34
General
-
Target
PresentationNative_cor3.dll
-
Size
1.2MB
-
MD5
101536b90a55412fbbe8b5247ecd7af4
-
SHA1
8697af6fb8f07339db7cd45fea206bfef8b32563
-
SHA256
aea2d02150ca2c68d8323486daaa198a5237c1e47141dc3c907e2c4f46126304
-
SHA512
7cc262ad78a697025242bbf5af94c647fb01ee4b00099352fdf7eb9f0bdeb4d30ef9cf9d9f13cc73ba88eec0c2eb9fc8cbaf27c30e604ff6b6b668bdc55cc6d0
-
SSDEEP
24576:URBe8yLZba2oWlrbIwL0lMqfPUbsQf8N81hlAc0htf/H+WggUR8xm+OC8d:Ui8yLo2oWlHqfPBQfCIlAcU/H+ZR8x7I
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\PresentationNative_cor3.dll,#11⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1992 -s 3402⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 368 -p 1992 -ip 19921⤵