50623f865bedcea99301e5b33e3c4bedf43e975e6297d5e4291009ef3ecafc35 | Triage

Analysis

max time kernel
121s
max time network
130s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20/04/2024, 01:55

Sharing

Report Analysis Logs

General

Target

libGLESv2.dll
Size

7.6MB
MD5

085893afd97f40cce27bf5a898bc899b
SHA1

8bb8b85cc7055534ee1f12e4a7e5d18fbe22fe48
SHA256

bc4eae59fe7e073c06228cf6a304be3a1a19ae2bff2c491f52ed1c7a7854de51
SHA512

a711d42e87fdd1b6bf89673fb120bad2c53a71435c8f64f124af3ef734d2f24c35d4cb516d3ab6834b51cbb619fd7daa7edc1d682f03610b4d5992e241ccd545
SSDEEP

98304:toqTR4ufIQslQAipy5V0etFBLGvpD1dSS:tof5FBLGvbsS

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2352 wrote to memory of 1076	2352	rundll32.exe	28
PID 2352 wrote to memory of 1076	2352	rundll32.exe	28
PID 2352 wrote to memory of 1076	2352	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2352
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2352 -s 88
  2⤵
  PID:1076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads