eb21a698101b0781187b0df85ea6683043e36d5e4229dc692b0a2e410c8adc6e | Triage

Analysis

max time kernel
118s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
21/04/2024, 13:16

Sharing

Report Analysis Logs

General

Target

libGLESv2.dll
Size

7.1MB
MD5

b8c51e8dbdeab2339ca9e33885553ff6
SHA1

026c284e7c3ddf3ee491bf3073fe4c54628746da
SHA256

a8ce28ca36e63d0cae939b9a72271bffd44d4df3bee586f884dcdde91353e3ec
SHA512

bb09cf5262c2af7ad369b06346abf66e41c428dc53109083d12fc9cfa969e5499c28afcdb57b66cd5187530319307de8284eea5a211cb5f1b040639fe3f51a9c
SSDEEP

98304:Nt5gLbmQACQYA7g4fdYlDOckpKOgeSXwu:NE/AVuDSoZ

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1396 wrote to memory of 2384	1396	rundll32.exe	28
PID 1396 wrote to memory of 2384	1396	rundll32.exe	28
PID 1396 wrote to memory of 2384	1396	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1396
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1396 -s 88
  2⤵
  PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads