f64e37b3b56d779c7ff1d203525a5985e5c01f6779e1c2037f1cc13b5d1dc72e

Analysis

max time kernel
140s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
20/08/2023, 13:57

Target

Lunar Client Qt/libcrypto-1_1-x64.dll
Size

2.7MB
MD5

dcf3de145792e70012a4a5df58ad03d9
SHA1

fc433ba10170c5a22fedaaafbeb0dbd379cfd22e
SHA256

c246b0eac5994f7726689202de782b9f7c88678cf9d19250d481bb437c88fe64
SHA512

3bfb2cbe4fc5b7df782ada6cdf5a40aa1d3c528b06f154559d7de5804d8cebac376699af6489f78d024bbdb26140092b3fce103d857bd7e98d5e0d4b60320184
SSDEEP

49152:zVwAsO8nXHeus0vM6zu/IU6iFveYXpBJLKAmE7sRGtlqb5TNC3h3PDuKPftSw/Fl:0+usisQ+FvTXpBJLK9/5Ter79Sw/F31j

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3124	3040	WerFault.exe	16

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Lunar Client Qt\libcrypto-1_1-x64.dll",#1
1⤵
PID:3040
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3040 -s 352
  2⤵
  - Program crash
  PID:3124

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 408 -p 3040 -ip 3040
1⤵
PID:4872

memory/3040-133-0x00007FFB12ED0000-0x00007FFB13187000-memory.dmp

Filesize
2.7MB

Download