Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
03/06/2023, 21:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b733b6e77fb4388129e2e40f024de41a8045af4312a1a6e07bc8bb68aa2c7c31.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
b733b6e77fb4388129e2e40f024de41a8045af4312a1a6e07bc8bb68aa2c7c31.dll
-
Size
1.2MB
-
MD5
e4b2146fc220624bae40b70c044ab721
-
SHA1
5ef5e68c5d2192a792f7095c0c9f106663159401
-
SHA256
b733b6e77fb4388129e2e40f024de41a8045af4312a1a6e07bc8bb68aa2c7c31
-
SHA512
8b4e27f5e02e2e5eb284340428f93d74b1d9832ace5ff6fd6ba2f9ce77f708dfdeb64e4f5dec1b1a7fc89f7307f4e7d66843f8caef098abfef0e7ba965776e92
-
SSDEEP
24576:ln+5EYhtdpUjD+2c7nwn5tI3194JLGPpxR4kY7CefCv9F2STtIekpbg:SV0Fe3WMd4ks1ezTtpsg
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5084 2044 WerFault.exe 50
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\b733b6e77fb4388129e2e40f024de41a8045af4312a1a6e07bc8bb68aa2c7c31.dll,#11⤵PID:2044
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2044 -s 3362⤵
- Program crash
PID:5084
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 2044 -ip 20441⤵PID:5012