Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
16-08-2023 13:24
Static task
static1
Behavioral task
behavioral1
Sample
ef3df06d0305bfab33636b9e4b3429a10c81bcd365779805ce4658a8d05e1324.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ef3df06d0305bfab33636b9e4b3429a10c81bcd365779805ce4658a8d05e1324.dll
Resource
win10v2004-20230703-en
General
-
Target
ef3df06d0305bfab33636b9e4b3429a10c81bcd365779805ce4658a8d05e1324.dll
-
Size
284KB
-
MD5
60de5d85b9ec0d0ff02710d87f652214
-
SHA1
13cc342855b795e1b30112f816eba2cfb6c9a288
-
SHA256
ef3df06d0305bfab33636b9e4b3429a10c81bcd365779805ce4658a8d05e1324
-
SHA512
a30972a818eae0a25bcfd04de0cb47d7d93bba353977c09a6b27d012a595487bcfdec75f525fbe8c3b0f873220cda14778959afad932eb10041aa34df3b12069
-
SSDEEP
6144:4Gh3jIzURqHSY2fITiprXp6dBIsOaa3DaxFoh+6PPPP4:4Gh3MoRPY2wqp6rOMo
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4116 4536 WerFault.exe 17
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ef3df06d0305bfab33636b9e4b3429a10c81bcd365779805ce4658a8d05e1324.dll,#11⤵PID:4536
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4536 -s 8122⤵
- Program crash
PID:4116
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 436 -p 4536 -ip 45361⤵PID:320