Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
17/08/2023, 02:51
Static task
static1
Behavioral task
behavioral1
Sample
333.vbs
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
333.vbs
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
_ctypes.dll
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
_ctypes.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
pp.py
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
pp.py
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
python.exe
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
python.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
python37.dll
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
python37.dll
Resource
win10v2004-20230703-en
General
-
Target
python37.dll
-
Size
3.6MB
-
MD5
d558d4db5a6bd29a8b60b8aa46e5329a
-
SHA1
a5036009de7165b1b4721263eae4b240ee689095
-
SHA256
1cfdd40a9107d89310e4e3b6df5f25f26944b312e61638d014f1b1a8050ccc07
-
SHA512
5590fbd6c9c81293b21e9da9d35d5177f03ba3d247771e4abef3420420d9024f3a775796d73becd5aeb469df648d3105a016693c6b8f68e8c61399212439eebf
-
SSDEEP
49152:1TeuSWg7sxvzSxFHYxcim9kOTl8MiYGYwjy9x6xN2BjXISsOIjbXH3EM6nPP8MTj:dcdOMiY+yXCNnjTHUM68wsNyPH
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1452 512 WerFault.exe 64
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\python37.dll,#11⤵PID:512
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 512 -s 3842⤵
- Program crash
PID:1452
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 404 -p 512 -ip 5121⤵PID:2408