Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
04-06-2023 13:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c88728e8924b29b016d8dd1b83ef3b7d5ea50c3ab20ea7f55ff502a08a073522.dll
Resource
win10v2004-20230221-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
c88728e8924b29b016d8dd1b83ef3b7d5ea50c3ab20ea7f55ff502a08a073522.dll
-
Size
1.2MB
-
MD5
51dc78687317fc3b05291798bdeec433
-
SHA1
a6cf696b25a50e12093f7fbcf3633684765fd8ea
-
SHA256
c88728e8924b29b016d8dd1b83ef3b7d5ea50c3ab20ea7f55ff502a08a073522
-
SHA512
f9f16a649ae656afa20c03ad33be656479c5d0f99c017d236fca8f7ea1255073940b6b506b3e95ddb24078c3d3628d65ae530dedeb7f530243dfb7641a016e38
-
SSDEEP
24576:hLSd9kmW5Z/0L2s/lOvZm/K0s56BWIVMyaaO2HrOBV8eFc2zJdhWjtQx:Kv51/lmasFxFmtu
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4584 4632 WerFault.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c88728e8924b29b016d8dd1b83ef3b7d5ea50c3ab20ea7f55ff502a08a073522.dll,#11⤵PID:4632
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4632 -s 3282⤵
- Program crash
PID:4584
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 440 -p 4632 -ip 46321⤵PID:4724