Analysis
- max time kernel
141s - max time network
129s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
12/07/2023, 04:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dw4qdkjbqwijhdhbwqjid.iso.dll
Resource
win7-20230703-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
dw4qdkjbqwijhdhbwqjid.iso.dll
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
- Target dw4qdkjbqwijhdhbwqjid.iso.dll
- Size 2.9MB
- Sample230712-emccmabg89
- SHA256 50810e4696dd075ca23349e3e1c3a87fc7b46ab89f4b1eb093a5cfb74f84cc51
- MD5 f6d0b9617405f35bb846d671edda75d3
- SHA1 19307cd55c54e8d4db3666fd11d69f2fe27942c0
- SHA512 ebb3307c6664360f0d859735f3c6c519b08f10a18bb96a2829a09d9c5febb490b3d6a7f77315de5280fec3acd9b923b48386a17adb30a8b70c4b19b8ffcbc201
- SSDEEP 49152:jEFD9UfWifI29mfKQnMg2XgEl7MV/yTm:7U9yTm
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4656 3500 WerFault.exe 83
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\dw4qdkjbqwijhdhbwqjid.iso.dll,#11⤵PID:3500
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3500 -s 3282⤵
- Program crash
PID:4656
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 184 -p 3500 -ip 35001⤵PID:1172