Analysis
-
max time kernel
87s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
16/06/2023, 08:43
Static task
static1
Behavioral task
behavioral1
Sample
4a5531682ed5a69cb3c3d3f29c7947c5c862eaa8a8f5af597bb723397bb8d663.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4a5531682ed5a69cb3c3d3f29c7947c5c862eaa8a8f5af597bb723397bb8d663.dll
Resource
win10v2004-20230220-en
General
-
Target
4a5531682ed5a69cb3c3d3f29c7947c5c862eaa8a8f5af597bb723397bb8d663.dll
-
Size
3.8MB
-
MD5
545d958699895115bb9f4f42ba2a57ce
-
SHA1
c27b16d83bb0a96cb795c4e565b2c508efb5532d
-
SHA256
4a5531682ed5a69cb3c3d3f29c7947c5c862eaa8a8f5af597bb723397bb8d663
-
SHA512
d7cefcb053f63eea0f0d2ebfccb9f3ea4c8b466d60948f0f29a73ac28b5a0363a32621b8eaf8050ec0a7d30d201a9191f3c40fc9db21e3f7290574fcd86a6ced
-
SSDEEP
49152:U7Wp+tO09Xkax+bw2KnweWyP3Glz6clwTFUuvrUehB35a5F3pKKoef7It1bc6JTe:IJpM6/FeTIt19R/atd
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2788 4480 WerFault.exe 46 2716 4480 WerFault.exe 46
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\4a5531682ed5a69cb3c3d3f29c7947c5c862eaa8a8f5af597bb723397bb8d663.dll,#11⤵PID:4480
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4480 -s 4282⤵
- Program crash
PID:2788
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4480 -s 5922⤵
- Program crash
PID:2716
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 416 -p 4480 -ip 44801⤵PID:4372
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 544 -p 4480 -ip 44801⤵PID:4260