Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
30/05/2023, 16:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ea01204049dd6306d301ff1f685e4db023e2f3301e632c2e145f32fdb1a63598.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
ea01204049dd6306d301ff1f685e4db023e2f3301e632c2e145f32fdb1a63598.dll
-
Size
1.2MB
-
MD5
dd5fe02622a258049799ba3013d08406
-
SHA1
c55a4f6880ecdbed0399ab283bf915777e3fce73
-
SHA256
ea01204049dd6306d301ff1f685e4db023e2f3301e632c2e145f32fdb1a63598
-
SHA512
6ba018fa93ffb2bda0ab4283275e91ef93b111124adea23f262851a8c7e01a54625dde2b3f63d52611432d228b0f0b910a1adf5d905e2080d7fb22523d53aef9
-
SSDEEP
24576:DV0UU15cjJZQl3+S+sv6QCQEmwyhFz/1azp3Olzdd+B48:Vw5L+h1nWk3WzvS
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2124 1872 WerFault.exe 23
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ea01204049dd6306d301ff1f685e4db023e2f3301e632c2e145f32fdb1a63598.dll,#11⤵PID:1872
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1872 -s 3282⤵
- Program crash
PID:2124
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 464 -p 1872 -ip 18721⤵PID:2056