Analysis
-
max time kernel
91s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
02/06/2023, 07:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2121c1b04c3ed54b2edcf5469b53e8dde71098100ae02d997a530763db0b1f7d.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
2121c1b04c3ed54b2edcf5469b53e8dde71098100ae02d997a530763db0b1f7d.dll
-
Size
1.2MB
-
MD5
707bcfb40ec870cdf5bc2ed6fce2ee40
-
SHA1
c4113c695e76c867510ccf7663029ffc4967c487
-
SHA256
2121c1b04c3ed54b2edcf5469b53e8dde71098100ae02d997a530763db0b1f7d
-
SHA512
9e50942d2087c373bc41ccaa66c9bbc17172e261ced43b691c03f83f45234c7248f6e2113aa706bebca0caf9164c9af842a22fcf73cb974c3b4235d4ffd45ae7
-
SSDEEP
24576:McYZEnNCUmBLmK4EeMTXOi/RxIhr0o7Ps43o4nGHYOzUdBRmLvz:HYCEeMTXNouPQdBRO
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1988 4892 WerFault.exe 81
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\2121c1b04c3ed54b2edcf5469b53e8dde71098100ae02d997a530763db0b1f7d.dll,#11⤵PID:4892
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4892 -s 3282⤵
- Program crash
PID:1988
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 404 -p 4892 -ip 48921⤵PID:824