66745a4257b713585ce8e7b16edd8ae00d247f713ad6ea02dc4c39ef94b8c677 | Triage

Resubmissions

28-05-2024 10:29

240528-mjl2nafe8z 7

Analysis

max time kernel
117s
max time network
126s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
28-05-2024 10:29

Sharing

Report Analysis Logs

General

Target

libGLESv2.dll
Size

6.6MB
MD5

d6dbbdde59fe87c6cf99d16380cfc022
SHA1

99e456a6b3e49a4e25c9ed37d35635b2393e9c1d
SHA256

ac468c2fa15a62557266a6df0caa331c1a814fc25ee760d88e6d6288da5e6e65
SHA512

bd9d12d38eed4dc6efa31e03a52ccf6cfd19394d179659e290c4ba3ea5a748d73f7a16e52437a4d7ea07a3856bcabfa2a5af73a5ad785ab8b00b427c9d293d48
SSDEEP

98304:GQCiOwIi7Xj2oGSfaxUsDXHc6Y+cE7BS25VowEPWyn9v9:GQCi337lfaWsDX86UAaVX

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3044	3008	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2988 wrote to memory of 3008	2988	rundll32.exe	28
PID 2988 wrote to memory of 3008	2988	rundll32.exe	28
PID 2988 wrote to memory of 3008	2988	rundll32.exe	28
PID 2988 wrote to memory of 3008	2988	rundll32.exe	28
PID 2988 wrote to memory of 3008	2988	rundll32.exe	28
PID 2988 wrote to memory of 3008	2988	rundll32.exe	28
PID 2988 wrote to memory of 3008	2988	rundll32.exe	28
PID 3008 wrote to memory of 3044	3008	rundll32.exe	29
PID 3008 wrote to memory of 3044	3008	rundll32.exe	29
PID 3008 wrote to memory of 3044	3008	rundll32.exe	29
PID 3008 wrote to memory of 3044	3008	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2988
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3008
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 3008 -s 220
    3⤵
    - Program crash
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads