Overview
overview
10Static
static
1data/chrome_elf.dll
windows7-x64
1data/chrome_elf.dll
windows10-2004-x64
1data/d3dco...47.dll
windows7-x64
3data/d3dco...47.dll
windows10-2004-x64
1data/d9.dll
windows7-x64
5data/d9.dll
windows10-2004-x64
5data/dddd.dll
windows7-x64
5data/dddd.dll
windows10-2004-x64
5data/event...er.dll
windows7-x64
1data/event...er.dll
windows10-2004-x64
1data/libEGL.dll
windows7-x64
1data/libEGL.dll
windows10-2004-x64
1data/libGLESv2.dll
windows7-x64
3data/libGLESv2.dll
windows10-2004-x64
3data/mojo_core.dll
windows7-x64
1data/mojo_core.dll
windows10-2004-x64
1data/sfvstwrap.dll
windows7-x64
1data/sfvstwrap.dll
windows10-2004-x64
1data/so4me...ib.dll
windows7-x64
3data/so4me...ib.dll
windows10-2004-x64
3data/sonym...xp.dll
windows7-x64
1data/sonym...xp.dll
windows10-2004-x64
1data/vdlxi...64.dll
windows7-x64
3data/vdlxi...64.dll
windows10-2004-x64
3data/vk_sw...er.dll
windows7-x64
3data/vk_sw...er.dll
windows10-2004-x64
3data/vulkan-1.dll
windows7-x64
3data/vulkan-1.dll
windows10-2004-x64
3setup.exe
windows7-x64
10setup.exe
windows10-2004-x64
10Analysis
-
max time kernel
71s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
18-02-2023 03:32
Static task
static1
Behavioral task
behavioral1
Sample
data/chrome_elf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
data/chrome_elf.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
data/d3dcompiler_47.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
data/d3dcompiler_47.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
data/d9.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
data/d9.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
data/dddd.dll
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
data/dddd.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
data/eventlog_provider.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
data/eventlog_provider.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
data/libEGL.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
data/libEGL.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
data/libGLESv2.dll
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
data/libGLESv2.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
data/mojo_core.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
data/mojo_core.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
data/sfvstwrap.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
data/sfvstwrap.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
data/so4mediainfolib.dll
Resource
win7-20220901-en
Behavioral task
behavioral20
Sample
data/so4mediainfolib.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
data/sonymvd2pro_xp.dll
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
data/sonymvd2pro_xp.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
data/vdlxipp61_x64.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
data/vdlxipp61_x64.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral25
Sample
data/vk_swiftshader.dll
Resource
win7-20220901-en
Behavioral task
behavioral26
Sample
data/vk_swiftshader.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
data/vulkan-1.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
data/vulkan-1.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
setup.exe
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
setup.exe
Resource
win10v2004-20221111-en
General
-
Target
data/vk_swiftshader.dll
-
Size
4.7MB
-
MD5
65cff6700eba818c057c75287c7b14f2
-
SHA1
a1cc8ee2311b6065200808a1f6a509ce94b32a20
-
SHA256
00279690ad79083e3c1b292570035ea2e1e22cf377594a94210c4ff48828a65f
-
SHA512
2b4baa43e7cb7fff67977e402b19b9c39c8016c75fa86b001fc5aac3d8a1697e4ba5f0d3475c0869e04020f1e075f7803287659f947de7e0b6022aeb439c70b5
-
SSDEEP
49152:IaZyux4B2UFWiBJT3ZsDMJaoPKdGSQfb/fuoxvuDNkPHk+MHMnVATxfdB09f8XRL:Iu67gUknMVAa9f8RAo
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4620 2860 WerFault.exe 77
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\data\vk_swiftshader.dll,#11⤵PID:2860
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2860 -s 3322⤵
- Program crash
PID:4620
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 2860 -ip 28601⤵PID:4116