Analysis
-
max time kernel
140s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
13-09-2023 11:10
Behavioral task
behavioral1
Sample
6b7d60a672861e0d0e9f66d02c4215ee23d381023b53cd7d61b6bf21ce418edf.dll
Resource
win7-20230831-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
6b7d60a672861e0d0e9f66d02c4215ee23d381023b53cd7d61b6bf21ce418edf.dll
Resource
win10v2004-20230831-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
6b7d60a672861e0d0e9f66d02c4215ee23d381023b53cd7d61b6bf21ce418edf.dll
-
Size
259KB
-
MD5
b3db4be06a46290c0f27e7d16798b842
-
SHA1
4569a2475e239accd5819453692795f112d3f6c1
-
SHA256
6b7d60a672861e0d0e9f66d02c4215ee23d381023b53cd7d61b6bf21ce418edf
-
SHA512
454a91e8bc4723bd2f648633290b439f782df777e66c59f97f1b6fe547f1a636eb40cefb7933e86e479dc12af64660a562d5a0bfc40ffd7ebf55fbf7cbf933ce
-
SSDEEP
6144:uJqVG5d1IpMyibgkTZI6jHID90avBXKH/:u3d6tevox/BX8
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1388 3484 WerFault.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6b7d60a672861e0d0e9f66d02c4215ee23d381023b53cd7d61b6bf21ce418edf.dll,#11⤵PID:3484
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 3484 -s 3282⤵
- Program crash
PID:1388
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 3484 -ip 34841⤵PID:4964