Analysis
-
max time kernel
106s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
16-06-2023 09:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a1c0d667cfd7a157a0dc48601b692600ff3c46a6216c1d57f744bc78b6970b65.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
a1c0d667cfd7a157a0dc48601b692600ff3c46a6216c1d57f744bc78b6970b65.dll
-
Size
1.2MB
-
MD5
32073b57802196a1610893d4a0a251df
-
SHA1
569b507eb581b1756aa03f34a5c22bd6ea235113
-
SHA256
a1c0d667cfd7a157a0dc48601b692600ff3c46a6216c1d57f744bc78b6970b65
-
SHA512
70f114d065ab63345af69e0e08c576807a6c25819b1830fb23e7d7d69266e2395aa704ff316dd2764f93a72044d7cfe9905e19c669c2e7178cf6bc1c61f5009a
-
SSDEEP
24576:zzO33ic+tWTgB3EMMhhe+TJ3YD7sgpfzKTKqJNHjqvHGPujdclCg8PWNrqyW+E:mvSaIuoEKqJ5qBjdfZV
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1900 1876 WerFault.exe 64
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\a1c0d667cfd7a157a0dc48601b692600ff3c46a6216c1d57f744bc78b6970b65.dll,#11⤵PID:1876
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1876 -s 3282⤵
- Program crash
PID:1900
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 432 -p 1876 -ip 18761⤵PID:2968