Analysis
- max time kernel
156s - max time network
162s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system - submitted
13/06/2023, 04:29
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Gen.Variant.Barys.434263.25530.31430.dll
Resource
win7-20230220-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Gen.Variant.Barys.434263.25530.31430.dll
Resource
win10v2004-20230220-en
2 signatures
150 seconds
General
- Target SecuriteInfo.com.Gen.Variant.Barys.434263.25530.31430.dll
- Size 2.4MB
- Sample230613-e38qrsfb9v
- SHA256 66de662e05a815c7c564e4b3f3da394ebbda6d87ee1fbd32b282dbc737b1240c
- MD5 843f2b189e089b832b2bfa96d6c28ce3
- SHA1 63c46dedc8f53d1aa21432b2f7f89d19454402f4
- SHA512 51782c8cdf0a9a2d8734bf13534270856c69a2ab9dcbb78535a3721535a261a8c84e57ea804b7cb930755bd897a11117ee9dc246813a3b563320838eeed122ef
- SSDEEP 49152:2vrs3D6TUdgBzeJYebqE4qchWry2hnKv+R7jizoL5laI3x:Q+OBSbqE5kWrBn8+R0
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/556-133-0x00000000519B0000-0x00000000520F2000-memory.dmp upx - Program crash 1 IoCs
pid pid_target Process procid_target 416 556 WerFault.exe 38
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Gen.Variant.Barys.434263.25530.31430.dll,#11⤵PID:556
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 556 -s 4962⤵
- Program crash
PID:416
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 452 -p 556 -ip 5561⤵PID:3468