Analysis
-
max time kernel
58s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
28/05/2023, 16:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fec346db0346e5cfb3243f240851b587e9e9fee468c236dbe7bd27b45df09b53.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
fec346db0346e5cfb3243f240851b587e9e9fee468c236dbe7bd27b45df09b53.dll
-
Size
1.2MB
-
MD5
e87c172d7d80c2ba7cb28a820ebe4d93
-
SHA1
a2f04ee828ab840a03f2920baecc0a2f869ed80e
-
SHA256
fec346db0346e5cfb3243f240851b587e9e9fee468c236dbe7bd27b45df09b53
-
SHA512
fcfe216c3ccd174560929da35dcdaa7ed52e6adf75d7912dd47e03954738808d6b76d3cb629b225d3aa557447b2b53d83f52544a06aacfb49bea3ddb07a58ffc
-
SSDEEP
24576:V88Kjwqgo6dmg6XKZz0AUfOwZbB2aBnRLI151E/BgXRzyCF7z7vd:u7+ZU3TODE/CdPd
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 748 864 WerFault.exe 76
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\fec346db0346e5cfb3243f240851b587e9e9fee468c236dbe7bd27b45df09b53.dll,#11⤵PID:864
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 864 -s 3282⤵
- Program crash
PID:748
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 456 -p 864 -ip 8641⤵PID:4896