Analysis
-
max time kernel
120s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
15-06-2024 01:57
General
-
Target
SETAP_9090__Pa$$W0rdS~!!/vcruntime140_app.dll
-
Size
21KB
-
MD5
c0f29bd3b0eb4d8795d609a0c52e0926
-
SHA1
2f1958696d66edaf38079e370dcc2b41c7474122
-
SHA256
813a447192c4fa7d25d0716b769399546f8bf6b31269dd8ad47f9812008d79e6
-
SHA512
02bc56ad129a7d6382ba8d68b68a52fa70ace9bce68aae56d901bc60451982e358805e950ab49ae3d0c052c2ac6d44a6f5ab3679cd4ce2fbb205e4a8c7d7b670
-
SSDEEP
384:K0g/dJiHlDoeuczbaj7wTfzvg55dHRN7ooiFWSlGs4kz:w/d8lDoeuczbaj7Cg9jHPs
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SETAP_9090__Pa$$W0rdS~!!\vcruntime140_app.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SETAP_9090__Pa$$W0rdS~!!\vcruntime140_app.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 960 -s 6043⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 960 -ip 9601⤵