Overview
overview
10Static
static
1data/chrome_elf.dll
windows7-x64
1data/chrome_elf.dll
windows10-2004-x64
1data/d3dco...47.dll
windows7-x64
3data/d3dco...47.dll
windows10-2004-x64
1data/d9.dll
windows7-x64
5data/d9.dll
windows10-2004-x64
5data/dddd.dll
windows7-x64
5data/dddd.dll
windows10-2004-x64
5data/event...er.dll
windows7-x64
1data/event...er.dll
windows10-2004-x64
1data/libEGL.dll
windows7-x64
1data/libEGL.dll
windows10-2004-x64
1data/libGLESv2.dll
windows7-x64
3data/libGLESv2.dll
windows10-2004-x64
3data/mojo_core.dll
windows7-x64
1data/mojo_core.dll
windows10-2004-x64
1data/sfvstwrap.dll
windows7-x64
1data/sfvstwrap.dll
windows10-2004-x64
1data/so4me...ib.dll
windows7-x64
3data/so4me...ib.dll
windows10-2004-x64
3data/sonym...xp.dll
windows7-x64
1data/sonym...xp.dll
windows10-2004-x64
1data/vdlxi...64.dll
windows7-x64
3data/vdlxi...64.dll
windows10-2004-x64
3data/vk_sw...er.dll
windows7-x64
3data/vk_sw...er.dll
windows10-2004-x64
3data/vulkan-1.dll
windows7-x64
3data/vulkan-1.dll
windows10-2004-x64
3setup.exe
windows7-x64
10setup.exe
windows10-2004-x64
10Analysis
-
max time kernel
100s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
18-02-2023 03:32
Static task
static1
Behavioral task
behavioral1
Sample
data/chrome_elf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
data/chrome_elf.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
data/d3dcompiler_47.dll
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
data/d3dcompiler_47.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
data/d9.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
data/d9.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
data/dddd.dll
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
data/dddd.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
data/eventlog_provider.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
data/eventlog_provider.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
data/libEGL.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
data/libEGL.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
data/libGLESv2.dll
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
data/libGLESv2.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
data/mojo_core.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
data/mojo_core.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
data/sfvstwrap.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
data/sfvstwrap.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
data/so4mediainfolib.dll
Resource
win7-20220901-en
Behavioral task
behavioral20
Sample
data/so4mediainfolib.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
data/sonymvd2pro_xp.dll
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
data/sonymvd2pro_xp.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
data/vdlxipp61_x64.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
data/vdlxipp61_x64.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral25
Sample
data/vk_swiftshader.dll
Resource
win7-20220901-en
Behavioral task
behavioral26
Sample
data/vk_swiftshader.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
data/vulkan-1.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
data/vulkan-1.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
setup.exe
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
setup.exe
Resource
win10v2004-20221111-en
General
-
Target
data/vulkan-1.dll
-
Size
894KB
-
MD5
4b29603d5f208f805a5227fa1d6713cc
-
SHA1
ef7c6478e26dd2c2f4fc4ecce0b7d710a9023f09
-
SHA256
998280e73d8a5d62a25d335b291363d15f3746492ac3d5f4479549f9442c6b9e
-
SHA512
f863571fd13aea9bbdd0d96ed671a6cd11f28a3a9677357317b6afc0c8990c23176c1ce68a645057cb2dc09d2fc5d93963b7578ae50aa3636d049b5a68584d31
-
SSDEEP
12288:UQgtdWVrC+8eiZB25pL82ZWdAKT0Yo5KE1so3AJLLP:U1dWtNbBZWz6t1svtT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3756 4896 WerFault.exe 35
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\data\vulkan-1.dll,#11⤵PID:4896
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4896 -s 3522⤵
- Program crash
PID:3756
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 428 -p 4896 -ip 48961⤵PID:4836