Analysis
-
max time kernel
137s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
08/06/2023, 10:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0646aec5bf637024ce5e6c6688eee6cb540a3a503fd4edacf98cd992b246b502.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
0646aec5bf637024ce5e6c6688eee6cb540a3a503fd4edacf98cd992b246b502.dll
-
Size
1.2MB
-
MD5
2ad4cf4ce19b1358b9e868c00344ae72
-
SHA1
a1df7b821f45b2f8ac5b87db3a4f0cb757142e97
-
SHA256
0646aec5bf637024ce5e6c6688eee6cb540a3a503fd4edacf98cd992b246b502
-
SHA512
b8ad392c3166689cd38653a79cc0b38b4626fea47e295ca3cf4f2bc2b0751cccc7c4d179c859e9d4dc68a4051b6ba595b1db6118b15ebeafa0111cd6174dd32d
-
SSDEEP
24576:+f1mNgvhcTL+puoCTrQwYKUkzGE0MbyvDPZGz7VlWnJ0iKS0tMNiC:dQS+WvVUxle5C
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4056 1164 WerFault.exe 53
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0646aec5bf637024ce5e6c6688eee6cb540a3a503fd4edacf98cd992b246b502.dll,#11⤵PID:1164
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1164 -s 3282⤵
- Program crash
PID:4056
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 444 -p 1164 -ip 11641⤵PID:3464