b56e537748f6b1c35ab9a4ef5e45191be683b0feb81114555dd9cc5f3ecfd532 | Triage

Analysis

max time kernel
122s
max time network
134s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20-03-2024 21:43

Sharing

Report Analysis Logs

General

Target

libGLESv2.dll
Size

7.3MB
MD5

eaedf6de749ef1230197ce1ac0455f0e
SHA1

ba737231f09676278cdeb7840aab1df1ea76c57b
SHA256

8dae6f25ad4fcbbb7eb617ac02fac48c7f0bea7f75c630ea02882cf4fb469a25
SHA512

3417438c516a51e1e04a82c4f145d881c2f2dfb90428656c9aaea80b3b46fa3e4c536b320bc6b137186e200603a4aaa250bd21e0f117b3a02f224cbf20d3a2cc
SSDEEP

98304:3FIH74F3mX+rUNnIdIXoqxWPlXm368Eb:3Cu3LrU/xWPpC68

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2600 wrote to memory of 2620	2600	rundll32.exe	27
PID 2600 wrote to memory of 2620	2600	rundll32.exe	27
PID 2600 wrote to memory of 2620	2600	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2600
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2600 -s 92
  2⤵
  PID:2620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads