Analysis
- max time kernel
140s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
19/08/2023, 16:01
Behavioral task
behavioral1
Sample
b64-2-xord.dll
Resource
win7-20230712-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
b64-2-xord.dll
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
- Target b64-2-xord.dll
- Size 254KB
- Sample230819-tgeccsch4y
- SHA256 7ad79f28a7e10df617a55f85d379949f65fa30770966d889d899c94734e24cca
- MD5 4a82732a29459d7b81bb53c8f1a778e5
- SHA1 09cfec9d530cf471423fc062f21ddf23d29a04c7
- SHA512 ea390a2c8eb55925880ba7d7e770b1a62e8bd7eee3b9c32309a3412d8adbd779811623fb4913e75447ae0f5f400bae0e011ad0732b19263022448362bd0e330e
- SSDEEP 3072:mJwpS2NACV4qAbypuljJGnJYoTjqETdtbsnOfFwXVa/o494YJGaXMXhwHnaHL:mJwpYVNcn3pTdNe+WXVin4utHk
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 400 2228 WerFault.exe 80
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\b64-2-xord.dll,#11⤵PID:2228
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2228 -s 2682⤵
- Program crash
PID:400
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 424 -p 2228 -ip 22281⤵PID:3600