Analysis
-
max time kernel
123s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
11-08-2023 07:57
Behavioral task
behavioral1
Sample
d6274c8067c384480589315a6d80810d25a6be16cd638194a7609091d9743406.dll
Resource
win7-20230712-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
d6274c8067c384480589315a6d80810d25a6be16cd638194a7609091d9743406.dll
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
d6274c8067c384480589315a6d80810d25a6be16cd638194a7609091d9743406.dll
-
Size
257KB
-
MD5
f4ca1fefe222bcb48b12f8cb0a2288e5
-
SHA1
d1cbfb683f53b92b6c6268b94a52c6efb1547e5d
-
SHA256
d6274c8067c384480589315a6d80810d25a6be16cd638194a7609091d9743406
-
SHA512
bc83a5740357758937b44a03f0fd5267c979b69ff0a42544f5600bccf2404552aacc98f0c8e92bd3f1a1ddbb46a9a01ee8ac1ae5c278c6e9867d942c1b2cfde6
-
SSDEEP
6144:RsYwjwIGIprrJweGTIDjhOTRryQ8js5Q:RE/nweh5Q8
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 900 3880 WerFault.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d6274c8067c384480589315a6d80810d25a6be16cd638194a7609091d9743406.dll,#11⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3880 -s 3562⤵
- Program crash
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 3880 -ip 38801⤵