88e5ade2ec431b3a7398b1f81dfc4ed6119a9e95657c29a9d6646fb396f3761b | Triage

Resubmissions

29-06-2024 22:21

240629-19544s1epm 7

29-06-2024 22:13

240629-145amaxfjc 7

Analysis

max time kernel
121s
max time network
130s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
29-06-2024 22:21

Sharing

Report Analysis Logs

General

Target

libGLESv2.dll
Size

7.3MB
MD5

b62eda9bcf73a1205eba62ba1e58dfed
SHA1

a8663b78fb7897acaba6e6e73d1e1c00b0a8b7fc
SHA256

6572e621800f308de46fc60b5a615e015119410d3f1c260ce1750e4de81e91d1
SHA512

42d1f4f1e3762060869933a9c3b6176650579a20238097c52c7d6a9904f01ce327527c0607cf9a00c7b66944c1461975c15aa6fca18e0ce4703a5fd99ba2fadf
SSDEEP

98304:+nbalIu/BrsXHXnvV9AcDoyGDHnSHQZ3rW:+nGG0BMXBDerr

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2104 wrote to memory of 2160	2104	rundll32.exe	28
PID 2104 wrote to memory of 2160	2104	rundll32.exe	28
PID 2104 wrote to memory of 2160	2104	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2104
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2104 -s 88
  2⤵
  PID:2160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads