Analysis
-
max time kernel
91s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
02/02/2024, 07:55
General
-
Target
Plants.Vs.Zombies.GOTY/Plants Vs Zombies GOTY/Plants vs. Zombies/Core/QtNetwork4.dll
-
Size
1.1MB
-
MD5
3644a50b31fb1cef71e23682e4875f22
-
SHA1
2b36914bc97948f97c1c0ae7b2b636b1ecc476c1
-
SHA256
d62b3a6ad4844cad35c9938358cc8cd7e9f78688a30f8f2418fba5fa14ce4936
-
SHA512
8dfb8e19a3c0a5f7d2a28c5f585507d82f76eafa1c9e7300d69c5462228b13590c769b41d5b3271d070f4305137621ff8f8af613944c7ea654cd49cf9d93989d
-
SSDEEP
24576:znPRsjK2699dl03iS4GtAD9oCYe8GHut4wQq3NkZ9sZeGfTueWieQMP6TWtn2D9:zSQl0TAD9oCYe8GHut4wQq3NkZ9sZeGM
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Plants.Vs.Zombies.GOTY\Plants Vs Zombies GOTY\Plants vs. Zombies\Core\QtNetwork4.dll",#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Plants.Vs.Zombies.GOTY\Plants Vs Zombies GOTY\Plants vs. Zombies\Core\QtNetwork4.dll",#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2364 -s 6643⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2364 -ip 23641⤵