756bd1b6b32fb43874262844d1c398d5ab16a1524b9671af19d7e1049096ac8e | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09-05-2024 13:56

Sharing

Report Analysis Logs

General

Target

opengl32sw.dll
Size

20.0MB
MD5

7dbc97bfee0c7ac89da8d0c770c977b6
SHA1

a064c8d8967aaa4ada29bd9fefbe40405360412c
SHA256

963641a718f9cae2705d5299eae9b7444e84e72ab3bef96a691510dd05fa1da4
SHA512

286997501e1f5ce236c041dcb1a225b4e01c0f7c523c18e9835507a15c0ac53c4d50f74f94822125a7851fe2cb2fb72f84311a2259a5a50dce6f56ba05d1d7e8
SSDEEP

393216:LIckHor5uLnn83wAP5hxOZEa7/LzRuDFqILn5LgcKyZyQXt+8M:yEZbv

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2180	rundll32.exe

Suspicious use of SetWindowsHookEx 9 IoCs

pid	Process
2180	rundll32.exe
2180	rundll32.exe
2180	rundll32.exe
2180	rundll32.exe
2180	rundll32.exe
2180	rundll32.exe
2180	rundll32.exe
2180	rundll32.exe
2180	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\opengl32sw.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads