af277117f93fbe518b20b27504d9607df8389027daa848178dcf24355b33bd82 | Triage

Resubmissions

15/03/2024, 17:57

240315-wjxylafa5y 8

Analysis

max time kernel
130s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15/03/2024, 17:57

Sharing

Report Analysis Logs

General

Target

libGLESv2.dll
Size

7.1MB
MD5

9eb2566eabdbc1004da789923e21a53b
SHA1

1c8bac1f1c31ce184611e1796895d09eb4138a87
SHA256

b10186112042f3efd83f988806635490ae14a8fc1e631e91636e259d44a65453
SHA512

4b38f8898a630c3dbb9ea4726dacbae371ede2cf1ce48d4709d487094b9baca47edf73e2c7a69a35f3caea876ae8bc2d52c2104111b47989b7943b9288147504
SSDEEP

98304:2AgpTkR1+f1SlkWW6yAKwCD2x9Stm5H5wXV/J:p9nSYxCdcK/

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4652 wrote to memory of 4648	4652	rundll32.exe	90
PID 4652 wrote to memory of 4648	4652	rundll32.exe	90

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4652
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 4652 -s 340
  2⤵
  PID:4648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads