Overview
overview
10Static
static
1data/chrome_elf.dll
windows7-x64
1data/chrome_elf.dll
windows10-2004-x64
1data/d3dco...47.dll
windows7-x64
3data/d3dco...47.dll
windows10-2004-x64
1data/d9.dll
windows7-x64
5data/d9.dll
windows10-2004-x64
5data/dddd.dll
windows7-x64
5data/dddd.dll
windows10-2004-x64
5data/event...er.dll
windows7-x64
1data/event...er.dll
windows10-2004-x64
1data/libEGL.dll
windows7-x64
1data/libEGL.dll
windows10-2004-x64
1data/libGLESv2.dll
windows7-x64
3data/libGLESv2.dll
windows10-2004-x64
3data/mojo_core.dll
windows7-x64
1data/mojo_core.dll
windows10-2004-x64
1data/sfvstwrap.dll
windows7-x64
1data/sfvstwrap.dll
windows10-2004-x64
1data/so4me...ib.dll
windows7-x64
3data/so4me...ib.dll
windows10-2004-x64
3data/sonym...xp.dll
windows7-x64
1data/sonym...xp.dll
windows10-2004-x64
1data/vdlxi...64.dll
windows7-x64
3data/vdlxi...64.dll
windows10-2004-x64
3data/vk_sw...er.dll
windows7-x64
3data/vk_sw...er.dll
windows10-2004-x64
3data/vulkan-1.dll
windows7-x64
3data/vulkan-1.dll
windows10-2004-x64
3setup.exe
windows7-x64
10setup.exe
windows10-2004-x64
10Analysis
-
max time kernel
78s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
18-02-2023 03:32
Static task
static1
Behavioral task
behavioral1
Sample
data/chrome_elf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
data/chrome_elf.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
data/d3dcompiler_47.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
data/d3dcompiler_47.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
data/d9.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
data/d9.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
data/dddd.dll
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
data/dddd.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
data/eventlog_provider.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
data/eventlog_provider.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
data/libEGL.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
data/libEGL.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
data/libGLESv2.dll
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
data/libGLESv2.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
data/mojo_core.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
data/mojo_core.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
data/sfvstwrap.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
data/sfvstwrap.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
data/so4mediainfolib.dll
Resource
win7-20220901-en
Behavioral task
behavioral20
Sample
data/so4mediainfolib.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
data/sonymvd2pro_xp.dll
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
data/sonymvd2pro_xp.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
data/vdlxipp61_x64.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
data/vdlxipp61_x64.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral25
Sample
data/vk_swiftshader.dll
Resource
win7-20220901-en
Behavioral task
behavioral26
Sample
data/vk_swiftshader.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
data/vulkan-1.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
data/vulkan-1.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
setup.exe
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
setup.exe
Resource
win10v2004-20221111-en
General
-
Target
data/libGLESv2.dll
-
Size
7.1MB
-
MD5
2dbb82b699fde23616bb09bbc682f02d
-
SHA1
ab61757008822e8e4e3d5224926baa0d7f5a0e5d
-
SHA256
6fe416e5df17c9e324c0cbbfac1221e43b8864052443c54712b7c0c03b511c0a
-
SHA512
e2af408951318c942ae2de9faf3b681c9977e6c7e4a7a0ac74c77e0d39918ef23a54f46b7f1c5d2bc2cf95a0a593bb0be7dca36705bb98d8f3ff65084a99edcc
-
SSDEEP
98304:uuM171ZvG5Q570CSPnSFguTgLDxZzXJh4+c+gsOMu:V2V5RSPusHxKtFsc
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2828 4304 WerFault.exe 12
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\data\libGLESv2.dll,#11⤵PID:4304
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4304 -s 3402⤵
- Program crash
PID:2828
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 384 -p 4304 -ip 43041⤵PID:2036