79ae38d3832ab7d48543039eff6078538465eb83d8fbb124db2e319295ab5e68

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08-04-2024 12:04

Target

libGLESv2.dll
Size

7.5MB
MD5

368a951df457bbe926e384e452e2c42b
SHA1

3e8f89c4ccbc406824502f6cc0966e74ca8808a2
SHA256

47514cc1d5e169ac196113e795040d5d4f32bc382a1b05b0c9e429c428c7c3df
SHA512

799bf188e4128ed0e7291183a0070b71601dcc65a393f40f3e25d7c72f637cc820bd06affa1d109e056ef9c2cf20ab218af13da194dd1d183983bf9878df79fd
SSDEEP

49152:tvtCmX2Qw60vV+7EHbsoNIs1BnRvzzo7FK2tg9+En9FwCn0F3ePlGUVOAMAPWS54:52+ZKFqqnkgNJFQUxatiePxRe6Xm

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2380 wrote to memory of 2008	2380	rundll32.exe	28
PID 2380 wrote to memory of 2008	2380	rundll32.exe	28
PID 2380 wrote to memory of 2008	2380	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2380
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2380 -s 88
  2⤵
  PID:2008