e4489273eb27325f1b08ed1c5f210924c49a50ca617099d1ff69dd922eef00dd | Triage

Analysis

max time kernel
118s
max time network
140s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
13/06/2024, 10:39

Sharing

Report Analysis Logs

General

Target

libGLESv2.dll
Size

7.5MB
MD5

3025da037093055e7f6227105b7f1911
SHA1

df913a5ab21d49a0c51e2af6e3c7b2cb3d585fe0
SHA256

9ef38eb498ddb77973780c69b9dfbf84819b108f1daa657260c24dce1fad9b34
SHA512

87a7f6e74fa378a896bc80aacace79f57d7b87408be7d178266c8e345690df7314775f411828398a1c5f9c9d857792e83f51718b22e9d390f0bb92e6f9e6fa63
SSDEEP

98304:2eo+zGD6g/ZXxUhH2jsS5Tgg+uPGOja21pcwXm3zq:21u0MhHUmkjFCzq

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2624 wrote to memory of 2752	2624	rundll32.exe	30
PID 2624 wrote to memory of 2752	2624	rundll32.exe	30
PID 2624 wrote to memory of 2752	2624	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2624
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2624 -s 92
  2⤵
  PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads