Analysis
-
max time kernel
139s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
-
submitted
03-09-2023 01:32
General
-
Target
Config/amd64/CBSHost.dll
-
Size
175KB
-
MD5
dd139df87a896b894335e03ece2973bf
-
SHA1
c6eb8a276897acc4e1f34dc25df138b2c30f7918
-
SHA256
6a1075f4fab4acd2722e8946cba7b23508d120367c84aae3e83284124227013a
-
SHA512
1a6296ab7411771e1fd8147086cbcade6f761e10b44975086fc03a0f058faaa0acef692b97a56f2ddad3f66241c0fb1b7d6d7e897888cb53f86a9734ceed5874
-
SSDEEP
3072:OyghxXQLWyjBcbo9EIb7TX4VkUihhwWP/pdrgeDyv3M5xmimkqq6S8PdG6QqKWO+:k4L3dio7LcW7/p1geDyfgmimkqq6zQqI
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 5 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Config\amd64\CBSHost.dll,#11⤵
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 216 -s 5242⤵
- Program crash
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 412 -p 216 -ip 2161⤵