Analysis
-
max time kernel
140s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
21/07/2024, 18:40
General
-
Target
Video Enhancerv2013汉化绿色破解版/VDFilterPack/2DCLEAN.dll
-
Size
40KB
-
MD5
a876be788d59ebe8b0645e322751ccc4
-
SHA1
f4b0ad8533055abd1f8e062b025c41621a36578b
-
SHA256
fe2841b46768df45e63e6215b571cda5369aa23e0fdd662d70e847d260e690f2
-
SHA512
701377fb35d8cd774f235cf07e11ed5bc0fde0ad60e22e40c37f4e34bc4f0ac814fe24b6dc09f705247fae5709faae96b0f43952033b2d3f42c01a023ea7a7d6
-
SSDEEP
768:YQyljgWsCTcUvPBemSEJoaXj1zWfZoU9IWd5jmj:YUCTcUnBemVOaZuoAd5
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Video Enhancerv2013汉化绿色破解版\VDFilterPack\2DCLEAN.dll",#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\Video Enhancerv2013汉化绿色破解版\VDFilterPack\2DCLEAN.dll",#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4632 -s 6003⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4632 -ip 46321⤵