7b36d5c731b8c79f9d6f087bb15cded1b8243c359329a98c0d215afe93f75410 | Triage

Analysis

max time kernel
122s
max time network
130s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19/04/2024, 16:09

Sharing

Report Analysis Logs

General

Target

vk_swiftshader.dll
Size

4.5MB
MD5

65a5705d95a0820740b3396851ff1751
SHA1

a692a80bafc41ba1b29ef19890f8465b3fb20dcb
SHA256

4c4b935cbb320033f504a89b1eb0a4bcb176bbd46a5981153cb1f54deb146a1c
SHA512

0c5df23b96eaf952c4a498ff6d854df2b62e7631b16c2855ed37ddbadffba3dd52e7450f2e06cf094bec2e0d70d14c87a652150766d90ec8662e03123df5942d
SSDEEP

98304:x2GmsucG1vUTM3SFhCrHglx7LQDCwchuW6ugI:cuuF4XhCGLQDCaI

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1732	2032	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2012 wrote to memory of 2032	2012	rundll32.exe	28
PID 2012 wrote to memory of 2032	2012	rundll32.exe	28
PID 2012 wrote to memory of 2032	2012	rundll32.exe	28
PID 2012 wrote to memory of 2032	2012	rundll32.exe	28
PID 2012 wrote to memory of 2032	2012	rundll32.exe	28
PID 2012 wrote to memory of 2032	2012	rundll32.exe	28
PID 2012 wrote to memory of 2032	2012	rundll32.exe	28
PID 2032 wrote to memory of 1732	2032	rundll32.exe	29
PID 2032 wrote to memory of 1732	2032	rundll32.exe	29
PID 2032 wrote to memory of 1732	2032	rundll32.exe	29
PID 2032 wrote to memory of 1732	2032	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vk_swiftshader.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2012
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\vk_swiftshader.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2032
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 220
    3⤵
    - Program crash
    PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads