Analysis
-
max time kernel
137s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
30/05/2023, 16:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3afbe9ba03f4d9d2c1d758a34d3b5e33634094eac1d89f695b79a15ae7702354.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
3afbe9ba03f4d9d2c1d758a34d3b5e33634094eac1d89f695b79a15ae7702354.dll
-
Size
1.2MB
-
MD5
c08b233546d5093df11f682e9c8f651b
-
SHA1
eb39407e2288cce5b02409b6d9c83a6485f3620c
-
SHA256
3afbe9ba03f4d9d2c1d758a34d3b5e33634094eac1d89f695b79a15ae7702354
-
SHA512
36293e5d0d139ae5cf9dad8e3f734834a2b4f9e6a082ed9ee7f21d5faf700deba6b7b9de1b62b0152ab9fb57f9ce862b46b115ca317948dbdab4f951b62528bc
-
SSDEEP
24576:OSqXRxnyx/JQw1Gj4Q68Z9Op8Ve6V7dkiVEYJFqpQHTbBsrSOJra7M5oo:O5I3EU+sWVdV7dk6US4ag2o
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1220 1260 WerFault.exe 61
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3afbe9ba03f4d9d2c1d758a34d3b5e33634094eac1d89f695b79a15ae7702354.dll,#11⤵PID:1260
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1260 -s 3282⤵
- Program crash
PID:1220
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 424 -p 1260 -ip 12601⤵PID:1272