18ce929380ab15f9e9d23d156ff3cff56b94e33641a40379f57e7adc91130c3f

Resubmissions

09/04/2024, 22:11

09/04/2024, 21:43

09/04/2024, 21:18

06/04/2024, 10:55

06/04/2024, 10:41

max time kernel
361s
max time network
376s
platform
windows7_x64
resource
win7-20240319-en
resource tags

arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
submitted
09/04/2024, 21:18

Target

vk_swiftshader.dll
Size

4.8MB
MD5

6de7d79b89044a3c307b84b7e77085ce
SHA1

8b8f1b4391b8bd2481314e209b34ca00b0171f10
SHA256

5377dc1e04d1dafc540565c2e82e80066603794e94a433e8cb76cdb2e269ccc7
SHA512

1560accac1185a5ca334373d7521a1834b2d26160fe26797b135badee0f1220ab023bbaee48c69de7d8f869534d772dac31c67e19225d253842c3750a6577121
SSDEEP

49152:cveyoM/h2BPSjPJEvoSNxxJanAf9dX2kcngUkomWPG2pu6n9MT5F9AZCeqx7l1ZP:WQM/agZaHt7A4P/

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 792 wrote to memory of 2712	792	rundll32.exe	28
PID 792 wrote to memory of 2712	792	rundll32.exe	28
PID 792 wrote to memory of 2712	792	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vk_swiftshader.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:792
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 792 -s 84
  2⤵
  PID:2712