Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
12-10-2023 15:56
Behavioral task
behavioral1
Sample
3276-13-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20230831-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
3276-13-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20230915-en
0 signatures
150 seconds
General
-
Target
3276-13-0x0000000180000000-0x0000000180009000-memory.dll
-
Size
36KB
-
MD5
fbc235d5ccd7d7e79a16503cb4b86534
-
SHA1
e12b63a7fd75364b11d057652ddea1ce82e84a6c
-
SHA256
7431ebfb2b97cfdfa7b022052b72e99032710dd7dbb0102a6cee3f3faae54b50
-
SHA512
d1a7d9ba7fd54879b0f0f62f62ded57eeab134990ea838053811d400a08dc517547b646bb46cb654adea07e3a20c233ccf09f070f4905fc7396fd6c5385b3bec
-
SSDEEP
192:6P+nM5KC/zxayGc3gzq7YjDaqzJCueT+RfbZne9s6PLFaxP0tkYGijY:s5Jxayczq7Yjt9lfle9s6PL8V6kYGi8
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 1972 wrote to memory of 1740 1972 rundll32.exe WerFault.exe PID 1972 wrote to memory of 1740 1972 rundll32.exe WerFault.exe PID 1972 wrote to memory of 1740 1972 rundll32.exe WerFault.exe