Analysis
-
max time kernel
135s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
04-06-2023 14:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4edcbbee5409a2233215c7e5d35622de58ac1d24e2ff95528e15340497e9823a.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
4edcbbee5409a2233215c7e5d35622de58ac1d24e2ff95528e15340497e9823a.dll
-
Size
1.2MB
-
MD5
20bac33253e9ea4336b2edf5802977ba
-
SHA1
064c2d33a418e45d3b9956d892a8f04b7dc534cb
-
SHA256
4edcbbee5409a2233215c7e5d35622de58ac1d24e2ff95528e15340497e9823a
-
SHA512
d3ffed244ba8ddd430d3122275c702715578e7a36ced13d002c492f3fe705cce237748bac4cf10f5560e45dd401a442454df3d9aab44e137bd3a184e3a44875f
-
SSDEEP
24576:M/kSJKPlJI73kGeg/3Lnh/Guc8D6npAT/5F4x5us+fZ6nGpms1RNQVWz:20c2Y9zVjTox5uks1RyVi
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4416 3992 WerFault.exe 66
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\4edcbbee5409a2233215c7e5d35622de58ac1d24e2ff95528e15340497e9823a.dll,#11⤵PID:3992
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3992 -s 3362⤵
- Program crash
PID:4416
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 436 -p 3992 -ip 39921⤵PID:4776