Analysis
-
max time kernel
141s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
07-08-2023 16:11
Static task
static1
Behavioral task
behavioral1
Sample
Benign_ffad5f61500fda5297a5eddf0fd7b20495304bb606132de519ef9d3728f14804.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Benign_ffad5f61500fda5297a5eddf0fd7b20495304bb606132de519ef9d3728f14804.dll
Resource
win10v2004-20230703-en
General
-
Target
Benign_ffad5f61500fda5297a5eddf0fd7b20495304bb606132de519ef9d3728f14804.dll
-
Size
24KB
-
MD5
dc85f10105ae7bd1bc033e3b70d171e7
-
SHA1
34bcb9c199b74e32691611134a9983a2d24b8faf
-
SHA256
ffad5f61500fda5297a5eddf0fd7b20495304bb606132de519ef9d3728f14804
-
SHA512
7d6fbe256be5bb37f098198e248f0a33a2cdfb4f7ee85a645e80e2599146c0bc9150cff9dac7362a79b72d3c8095e64d78bb12ac96d05401b98516d80a389ed6
-
SSDEEP
384:XOyxH5Tc89xOETw4y7Te+x43QMQ3DHVwhXCDCnp23+r/jLAft:VwaOeyHJx7VwhSmnp23+zjEV
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2984 1216 WerFault.exe 27
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Benign_ffad5f61500fda5297a5eddf0fd7b20495304bb606132de519ef9d3728f14804.dll,#11⤵PID:1216
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1216 -s 3282⤵
- Program crash
PID:2984
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 1216 -ip 12161⤵PID:1572