Analysis
- max time kernel
1s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
05/07/2023, 19:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
505056.dat.dll
Resource
win7-20230703-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
505056.dat.dll
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
- Target 505056.dat.dll
- Size 825KB
- Sample230705-yldc3sgh81
- SHA256 045dff9f14a03225df55997cb2ca74ff60ecaf317b9e033ea93386785db84161
- MD5 c3da812bd1009dc1e33a952f3b84b9ca
- SHA1 657c03f30566ea091798801db681f1448dc57faa
- SHA512 5610f0de3cfee06674238f04e9a6820498d2ff908890372c18b070e61bd9f933fa77f4918d16364a26bde590c6213c171a5145822a155d9c704cb0609c493b9c
- SSDEEP 24576:yVVT+XirpTs7sx0QBnoNjla+idlpdIF9PF3NL:WF+uTsAx0tlpidvdkhF3NL
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4116 1444 WerFault.exe 78
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\505056.dat.dll,#11⤵PID:1444
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1444 -s 3282⤵
- Program crash
PID:4116
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 432 -p 1444 -ip 14441⤵PID:4708