Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
27/05/2023, 06:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e0221ad5207913620fd2a59fa0bd77056eec7417b3add2b310bfc0eee68f8d95.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
e0221ad5207913620fd2a59fa0bd77056eec7417b3add2b310bfc0eee68f8d95.dll
-
Size
1.2MB
-
MD5
a109beeace6b71b4bffe2d8200544646
-
SHA1
94f4ba415cf2fc9457bccecedacc7eaa2079a131
-
SHA256
e0221ad5207913620fd2a59fa0bd77056eec7417b3add2b310bfc0eee68f8d95
-
SHA512
45cbad4b82da596e83458ac0227c0a82fe01cadee44ba44801678b7c53ae725f3ff2025180ed28107770b85f419813804ae5e7064c6471fbbeba496f08e90639
-
SSDEEP
24576:hnFEQ39H3inchWuUJDRKU0F9nOXBn/Y6G637:UUtADRWgQ6r
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1192 4208 WerFault.exe 75
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e0221ad5207913620fd2a59fa0bd77056eec7417b3add2b310bfc0eee68f8d95.dll,#11⤵PID:4208
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4208 -s 3282⤵
- Program crash
PID:1192
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 456 -p 4208 -ip 42081⤵PID:4628