c0010bd39bdd04aee00a67a73c839c05c8972e473075a2a22213351efa818ff5 | Triage

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
23-04-2024 07:11

Sharing

Report Analysis Logs

General

Target

vulkan-1.dll
Size

786KB
MD5

a947c5d8fec95a0f24b4143ced301209
SHA1

ebf3089985377a58b8431a14e22a814857287aaf
SHA256

29cb256921a1b0f222c82650469d534ccdf038d1f395b3aaa9f1086918f5d3fa
SHA512

75f5e055f4422b5558fc1cb3ea84fb7cbeaae6f71c786cc06c295d4ab51c0b1c84e28a7c89fe544f007dbe8e612bed4059139f1575934fe4bac8e538c674ebd3
SSDEEP

24576:cJObHhG7TEnCGlrpZpjL4TB46Z5WODYsHh6g3P0zAk722:c0c7TECgpZpju46Z5WODYsHh6g3P0zA+

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2960	2072	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2004 wrote to memory of 2072	2004	rundll32.exe	28
PID 2004 wrote to memory of 2072	2004	rundll32.exe	28
PID 2004 wrote to memory of 2072	2004	rundll32.exe	28
PID 2004 wrote to memory of 2072	2004	rundll32.exe	28
PID 2004 wrote to memory of 2072	2004	rundll32.exe	28
PID 2004 wrote to memory of 2072	2004	rundll32.exe	28
PID 2004 wrote to memory of 2072	2004	rundll32.exe	28
PID 2072 wrote to memory of 2960	2072	rundll32.exe	29
PID 2072 wrote to memory of 2960	2072	rundll32.exe	29
PID 2072 wrote to memory of 2960	2072	rundll32.exe	29
PID 2072 wrote to memory of 2960	2072	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vulkan-1.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2004
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\vulkan-1.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2072
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2072 -s 220
    3⤵
    - Program crash
    PID:2960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads