Analysis

  • max time kernel
    13s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    05/08/2024, 21:31

General

  • Target

    S0laradD/libEGL.dll

  • Size

    485KB

  • MD5

    7b93aa2d3f49e88cb26fcfc0897073f5

  • SHA1

    119156600f2b4e1c07c7aa4907888662bf288cae

  • SHA256

    fd40b70086569b0298292e838e9d2ea2394304116705289e0666694429752870

  • SHA512

    78d996c33efc74dec54067765921d0690e4cfe8c63953c27e61b28b1bf9a8e6e25967694c00de1fb2cbec11e8c110d048c11d23ed337563b993c01d341a23491

  • SSDEEP

    6144:f3rGS+e87yDqHfFetvM/jvtGgJ53B6Zj8s1al2zl0ovk1SA7eSY/L8iAYu:TGS+e87A6eZM/jvtGgJZB6ZirS04LQB

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\S0laradD\libEGL.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2652
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 2652 -s 80
      2⤵
        PID:1340

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads