e66fd24e29c4cd33772fbda049a4efc7b55a0c22959d0d56d0fa77bd34040864 | Triage

Analysis

max time kernel
119s
max time network
131s
platform
windows7_x64
resource
win7-20240319-en
resource tags

arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
submitted
08-04-2024 11:44

Sharing

Report Analysis Logs

General

Target

libGLESv2.dll
Size

6.2MB
MD5

7b2ce44ad89a57b1183d36e89fd0357f
SHA1

178f7ed96f5c879b08729acff45bc50cd2ed64c7
SHA256

9072dc08a094f4669e50ac1d062e1e0ee53714eec67a2e7fc0dd2de832239701
SHA512

9d2909023d60564c8ab65cb1668e52b715c37df22bef480e5efa3218b1fad8777acaeae7a17b385e2dda2f3dc0e051ec157ec73b56cef1aff2b8a2281ef7ba41
SSDEEP

98304:FLBnpe7yyxRkfCSC7Kzc2e5+M1E+F+VeNmOeOptkLYhSzchdxPxd:FL9s7TbwCSW2e5+SF+3LYhee

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2188	2392	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2708 wrote to memory of 2392	2708	rundll32.exe	28
PID 2708 wrote to memory of 2392	2708	rundll32.exe	28
PID 2708 wrote to memory of 2392	2708	rundll32.exe	28
PID 2708 wrote to memory of 2392	2708	rundll32.exe	28
PID 2708 wrote to memory of 2392	2708	rundll32.exe	28
PID 2708 wrote to memory of 2392	2708	rundll32.exe	28
PID 2708 wrote to memory of 2392	2708	rundll32.exe	28
PID 2392 wrote to memory of 2188	2392	rundll32.exe	29
PID 2392 wrote to memory of 2188	2392	rundll32.exe	29
PID 2392 wrote to memory of 2188	2392	rundll32.exe	29
PID 2392 wrote to memory of 2188	2392	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2708
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2392
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2392 -s 224
    3⤵
    - Program crash
    PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads