d38241aaa6308ef9f79ca6ba87b8f903fd4aa2f44307a45076d0c244fb5c544c | Triage

Analysis

max time kernel
120s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20-04-2024 11:30

Sharing

Report Analysis Logs

General

Target

vulkan-1.dll
Size

910KB
MD5

8394d8c7b895eb2d455f3b5d63c7a2de
SHA1

a6728ae63306d1753e76fc3d01bc50ed27617229
SHA256

749a7e840894096fce59565c323d17ba3d6194540f7f139e23ab0bb53710f100
SHA512

3b08e51b325455bee519b61156e586f9ac4079713db34528737a6f31a2eba640d6ffafe5230a29ceeabe10876d399e00a5a2b5f0d5d637d7e4577cfd796ee654
SSDEEP

24576:qoHDVVdrfG09CPKuy0O0Q6Z5W0DYsHA6g3P0zAk7N+:quVdre0GKuy066Z5W0DYsHA6g3P0zAkM

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2020 wrote to memory of 2488	2020	rundll32.exe	28
PID 2020 wrote to memory of 2488	2020	rundll32.exe	28
PID 2020 wrote to memory of 2488	2020	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vulkan-1.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2020
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2020 -s 88
  2⤵
  PID:2488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads