Analysis
-
max time kernel
1798s -
max time network
1816s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
12/07/2024, 08:51
General
-
Target
maidomanie-1.0-win/lib/py2-windows-i686/libGLESv2.dll
-
Size
5.7MB
-
MD5
288d113d599efa90c088968ad13f1a86
-
SHA1
bd870df9c03316fe478585d2b32ef5b1db83a65d
-
SHA256
65eba047266755e177079eb9fe772559b4d0b02ca1dc900569c7274a6a080e74
-
SHA512
4327546a569065a609f958e2ce6bc252ec0c3bd86318e45e06c358615a29fa8f84bae7dadc3016fc7c9b23a1553ebcdb15504ac319f1cdb206d8b2ff91559de8
-
SSDEEP
98304:S/AfwtvJGAZnEgzkz6H2eJ7rbsTRKvmBaNmEM6bAD:SvJGAZnEgzkuWeJ7rYlKvmBaFU
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\maidomanie-1.0-win\lib\py2-windows-i686\libGLESv2.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\maidomanie-1.0-win\lib\py2-windows-i686\libGLESv2.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1244 -s 6123⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1244 -ip 12441⤵