Analysis
-
max time kernel
135s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
03-06-2023 03:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a2ad537ab7c900727287643a44db24409a21988bc03e4d38af761ea4227085cf.dll
Resource
win10v2004-20230221-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
a2ad537ab7c900727287643a44db24409a21988bc03e4d38af761ea4227085cf.dll
-
Size
1.2MB
-
MD5
ff657f0e0bf737bae5b19b602487c4e2
-
SHA1
fceae59dfd9cf0ed10bb8f23238cc4818d285d2b
-
SHA256
a2ad537ab7c900727287643a44db24409a21988bc03e4d38af761ea4227085cf
-
SHA512
a2b455362434ee10dc7a742078ae8cd99f1fce7cc83849623213f861178a678457035ce32081847a663cc25b4e0052fdebf0232117064017ef48c524b1e2694b
-
SSDEEP
24576:BJfz/STTtVoiytjbo49BKCfv3MryTP+ParA+cwMmPTjWw7cGvgcw:je7AnoqBfiglXW2IR
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1968 2676 WerFault.exe 21
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\a2ad537ab7c900727287643a44db24409a21988bc03e4d38af761ea4227085cf.dll,#11⤵PID:2676
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2676 -s 3362⤵
- Program crash
PID:1968
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 2676 -ip 26761⤵PID:1652