f7b398d27c0e269bf09dfefa9ee52559e953b1030ed432361c4e7d0a167b4438

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
22/04/2024, 01:43

Target
001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL/glib-2.0.dll
Size 1.0MB
Sample240422-b5j9eaeb3v
SHA256 64144483049fed3406f23d7028388b687a8e4c4d822171b18a295f70ccf220e0
MD5 132b0e16e2add7808e17f113a7724aeb
SHA1 aa7e3e20b6eaa1c5db5b4a2ca060be71ba3ef8c1
SHA512 4d91e249ca8609d1ec13ad526532a1d6e6141a1828fce25ac0e7319c24dc354773a9e09a58ecd62f57035b39a225b5d77377749af2cf2be9da01b159879db39d
SSDEEP 24576:PekMj5RU/KFHOTHRMQMa62jcS/KPDIj5d0HlKQrVmPQk:PekMjoKsRMQ+S/iDIj5d0FPVmYk
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3528	2208	WerFault.exe	90

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 224 wrote to memory of 2208	224	rundll32.exe	90
PID 224 wrote to memory of 2208	224	rundll32.exe	90
PID 224 wrote to memory of 2208	224	rundll32.exe	90

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL\glib-2.0.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:224
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\001-NOTIFICACION JUDICIAL AUTO DE IMPUTACION POR INCUMPLIMIENTO FISCAL\glib-2.0.dll",#1
  2⤵
  PID:2208
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2208 -s 180
    3⤵
    - Program crash
    PID:3528

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2208 -ip 2208
1⤵
PID:1660

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3936 --field-trial-handle=2304,i,6987730730348465820,3913273227385401271,262144 --variations-seed-version /prefetch:8
1⤵
PID:4664

memory/2208-0-0x0000000000910000-0x0000000000924000-memory.dmp

Download