Analysis
-
max time kernel
141s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
03-06-2023 01:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e48d233a5bc2077454a82666076911db0946e60d4d1c8ef01f1f94e14eef2038.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
e48d233a5bc2077454a82666076911db0946e60d4d1c8ef01f1f94e14eef2038.dll
-
Size
1.2MB
-
MD5
359abe34ac6afcf28611d3bb47309cf6
-
SHA1
d4158518f5c261be6883c07471b0c8a9f79edf18
-
SHA256
e48d233a5bc2077454a82666076911db0946e60d4d1c8ef01f1f94e14eef2038
-
SHA512
982b66e69ccf6f6b9d393f64b8fa4207dec23bce48c1b81c5898c85b993ecbff203bf76a2664ea36d191435df7da482c0ac010c6dc20870798c0e327b0d5976c
-
SSDEEP
24576:3e7b256IJI5tQO48+LnlOSN9QlIlnxXpcmL4fyYzJ9q:mhoP8+ZOS7lnxXC3Y
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5096 1656 WerFault.exe 48
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e48d233a5bc2077454a82666076911db0946e60d4d1c8ef01f1f94e14eef2038.dll,#11⤵PID:1656
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1656 -s 3282⤵
- Program crash
PID:5096
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 444 -p 1656 -ip 16561⤵PID:5072