Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
03/06/2023, 02:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
baa32666f05b8aab91b9b3c5202017ff8b6f28155c235299e6133ea826f56109.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
baa32666f05b8aab91b9b3c5202017ff8b6f28155c235299e6133ea826f56109.dll
-
Size
1.2MB
-
MD5
ec18d26c96907eb7beb9ddfcdb577012
-
SHA1
ea83ec520bb614bd6ca860ca77f3c2dbd660780c
-
SHA256
baa32666f05b8aab91b9b3c5202017ff8b6f28155c235299e6133ea826f56109
-
SHA512
8ea3055be44ded8d2d3d03375211ea20055391b9352355474e13c88caf6469269538a89f7657ceaeb41587e2590921817fc44d732c2a43c32633ef8b36967320
-
SSDEEP
24576:pzjM6P4b6QbU4hhNTAgOFmM4KrYF3IT6B0UKjp6spB+7KuMHG53AQLwXVR8KseX1:C7f7TwNzSi2KuMHGnwXP8XSKO3
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3200 3304 WerFault.exe 25
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\baa32666f05b8aab91b9b3c5202017ff8b6f28155c235299e6133ea826f56109.dll,#11⤵PID:3304
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3304 -s 3282⤵
- Program crash
PID:3200
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 452 -p 3304 -ip 33041⤵PID:3476