18ce929380ab15f9e9d23d156ff3cff56b94e33641a40379f57e7adc91130c3f

Resubmissions

09/04/2024, 22:11

09/04/2024, 21:43

09/04/2024, 21:18

06/04/2024, 10:55

06/04/2024, 10:41

max time kernel
1190s
max time network
1219s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/04/2024, 21:18

Target

libGLESv2.dll
Size

7.0MB
MD5

549f919f0ba15ba2554a749d19459809
SHA1

88af358173817e6da196be70c0773b4d07b28524
SHA256

ce1ed0fb50875472fb3e0a9a357e243a80f374b18be406dd2d8db90da5e75909
SHA512

0d1473f948737297fa54985b6ea18860cca20d437d4e978c53ca09078f40956f7076ca1671735ade0ac4e3cb24eec0388d015b7fab1a70ca041673865abeab06
SSDEEP

49152:8cRs1/VOY14IRwMqs5Jbkqd0bRh7yWXSnYUIV2Wi5zi1lJf3Lnn6cB7/h2Hmbs2t:XG2Ipp9eR+UDGRSoGetN42n1

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2612 wrote to memory of 2420	2612	rundll32.exe	30
PID 2612 wrote to memory of 2420	2612	rundll32.exe	30
PID 2612 wrote to memory of 2420	2612	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2612
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2612 -s 92
  2⤵
  PID:2420