fe6a7c0a2182b291b60041be502a9784554bd2264d48976f17dc5d4904f65ba3 | Triage

Analysis

max time kernel
123s
max time network
142s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 15:30

Sharing

Report Analysis Logs

General

Target

libGLESv2.dll
Size

7.3MB
MD5

0acc7f72c56e8e36c9ce8ce65b6b081c
SHA1

ec714b98b7c87478cd47d4c5422f75273dce37c0
SHA256

cbdfd5207e302b1e96a79b6d186c0dfd8f84f8243e8b81b687f9e14687e08b5f
SHA512

b7f5ee22cf18a95e5291f86f05e470189e60ab801b264c9ce74603044fdd6e7814a99c6c93d2ad357aaed13a84cbd01b6f1df41822ae466176d1c2cbe1de0879
SSDEEP

98304:/nbalIu/BrsXHXnvV9AcDoyGDHnSHQZ3rP:/nGG0BMXBDerr

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1628 wrote to memory of 2204	1628	rundll32.exe	29
PID 1628 wrote to memory of 2204	1628	rundll32.exe	29
PID 1628 wrote to memory of 2204	1628	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1628
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1628 -s 92
  2⤵
  PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads