Analysis
-
max time kernel
91s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
05-06-2023 12:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
586e728c377a061b04dadc6ed483a04ad3f19a4960b3e3c1cbe7728973be0912.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
586e728c377a061b04dadc6ed483a04ad3f19a4960b3e3c1cbe7728973be0912.dll
-
Size
1.2MB
-
MD5
74f1ea402e7824467677b90d230cd2ec
-
SHA1
a3793e3c2a69a4f84326e4ffbb1ab19db87c236f
-
SHA256
586e728c377a061b04dadc6ed483a04ad3f19a4960b3e3c1cbe7728973be0912
-
SHA512
bc1ac444d168fbc0e611b51d770729a31d5875d7ce02867989f50e4e4a33b6de44fe25e473a4bf067954e769890a2a03d43a4c3e567dd82f9524a73a8b67d256
-
SSDEEP
24576:tjaNQAmVsezvsa4S5QKFvJ0ftDuSiPefLEubi7BModVt:fB3fx0ftDuvlPV
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1936 1956 WerFault.exe 77
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\586e728c377a061b04dadc6ed483a04ad3f19a4960b3e3c1cbe7728973be0912.dll,#11⤵PID:1956
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1956 -s 3282⤵
- Program crash
PID:1936
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 1956 -ip 19561⤵PID:3196