Analysis
-
max time kernel
138s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
08/06/2023, 09:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3541fab5925721d6417e1ed5f1e6dac15b6324c618d80bf6e7ff750e854e021b.dll
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
3541fab5925721d6417e1ed5f1e6dac15b6324c618d80bf6e7ff750e854e021b.dll
-
Size
1.2MB
-
MD5
63caf3d79aea1eb2042081f3fb9c78ee
-
SHA1
cae3dac0d183f1094e9d9030bcfe6c0e93b59dd6
-
SHA256
3541fab5925721d6417e1ed5f1e6dac15b6324c618d80bf6e7ff750e854e021b
-
SHA512
bd18c3b36ee1e14a6edd5d38329e13021d85f63ead50c22386cfa92b243f50293e242f694e80dee52ddfdf432b6e22ca2cd9990588456e47c8e5937db3454286
-
SSDEEP
24576:p0owXSk0IkO0KJY6ZoEYncw87DnoYjnfpxA7eEKjAcBpF:KvJTrnJLhSTK0cZ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1344 4176 WerFault.exe 48
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3541fab5925721d6417e1ed5f1e6dac15b6324c618d80bf6e7ff750e854e021b.dll,#11⤵PID:4176
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4176 -s 3322⤵
- Program crash
PID:1344
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 460 -p 4176 -ip 41761⤵PID:2524