3009532e98aa81d46345bd85e5b3ddb8f24ff9c538ae64aafbd5aafd8cb01dea | Triage

Analysis

max time kernel
51s
max time network
54s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
26/06/2024, 01:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

libEGL.dll
Size

47KB
MD5

fa21c09c83ad8c73c5f759662dfc7d28
SHA1

3200769281496cc61065ff856836e36a50690033
SHA256

cdb4ba8f6e622f63a94df438552acb08d13af7b4a80ddce4b459f943e636d160
SHA512

b763c878db6bbc15f7ebfec2b65e01ec63c8ace681662a4a844ae55fa6f5dbbbe066713ca47357e68a8d7cb1b8b81d901fa6622934b576e4cd5604061703a1d3
SSDEEP

768:4dp3loIiS+gbIdX9h9btywVT+0sdfLKc/IQiInhtTaQotOnKOdNGd3:4H3llRbIdth9JjTvsFec/IYhtuztOnTW

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3308 wrote to memory of 2764	3308	rundll32.exe	79
PID 3308 wrote to memory of 2764	3308	rundll32.exe	79
PID 3308 wrote to memory of 2764	3308	rundll32.exe	79

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libEGL.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3308
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\libEGL.dll,#1
  2⤵
  PID:2764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads