Analysis
-
max time kernel
91s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
31-05-2023 03:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c1917b46e053123ad430aafb2a8d6f3cc3fac4d24078a065d00656f68ab94824.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
c1917b46e053123ad430aafb2a8d6f3cc3fac4d24078a065d00656f68ab94824.dll
-
Size
1.2MB
-
MD5
ac85d5dcd6117e55603cebd24fe83c4a
-
SHA1
e5f5c1218af26a036e0989092ab0f7060aa77317
-
SHA256
c1917b46e053123ad430aafb2a8d6f3cc3fac4d24078a065d00656f68ab94824
-
SHA512
3aae68e6cf6812a61c70b3dde2d5bf6e5ce306215a1f9be0aedc5023cabc80742e373e3e776b94ea984a69cecfdb3a86704baa2c79eb90cd4e26b5bc4e2bc202
-
SSDEEP
24576:3FCcW8RT9F67gwL3k2UeOL9HnUUCexncTD+1z4IHN/Hn:PIr3jUeOfc3+TZH
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1472 3980 WerFault.exe 76
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c1917b46e053123ad430aafb2a8d6f3cc3fac4d24078a065d00656f68ab94824.dll,#11⤵PID:3980
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3980 -s 3362⤵
- Program crash
PID:1472
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 364 -p 3980 -ip 39801⤵PID:4596