Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
18-08-2023 20:45
Static task
static1
Behavioral task
behavioral1
Sample
combase.dll
Resource
win7-20230712-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
combase.dll
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
combase.dll
-
Size
3.8MB
-
MD5
a92734b99a0eeb2a5486ba1bb7cac883
-
SHA1
ebd1d527dafe693ae27193d509f4f3520242b39f
-
SHA256
6ad144a7b2c45b61aa5f74fd877a51aac11a727ca2f3d2112cf790e1852f7abb
-
SHA512
80f0165c25a7a0428b5de1d578c5bb5f0fddd5cebf717f11ec851acbb9b0186710d0cb51443dd0757fabf7512a49944983f0e332be4e19235f5133c110e74246
-
SSDEEP
49152:W1hDnmbyCfLQdpho/0K5K6NiFDQiwYHqtMMA2zCnki:4h4y4qno/vYmiFkiLN
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1608 4448 WerFault.exe 80
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\combase.dll1⤵PID:4448
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4448 -s 6322⤵
- Program crash
PID:1608
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 444 -p 4448 -ip 44481⤵PID:3704