08fa522fdb6a7be3545562612b87f199a788d2b2ca8224649632ab12853ce7ba | Triage

Analysis

max time kernel
122s
max time network
130s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
22/04/2024, 20:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

libGLESv2.dll
Size

7.6MB
MD5

de1edd80cfc9be1fa2b7432926392572
SHA1

40f75233ab50e255f4580c828034ed4091e44f7b
SHA256

7797a1c375a2cbed5692f98a78daf20cf579d7ab35f782e5efc19392e06304d1
SHA512

559f095f1dc45139d6d75b64d854999b2fc12a1b3ca7232d0c54a04b8f85f9062714b84e4bbafd0146542a25e06255879bb159b7900d8038e7c19dfd92301ab7
SSDEEP

98304:WZhH85ghf5DcIgPeUOFuxmDt1FGZxXR0ftDV92h:Wv5VF/1FGZg

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2192 wrote to memory of 1592	2192	rundll32.exe	28
PID 2192 wrote to memory of 1592	2192	rundll32.exe	28
PID 2192 wrote to memory of 1592	2192	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2192
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2192 -s 88
  2⤵
  PID:1592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads