2b34af774ce56ea57402014d840dd781da514c09e1312a7eac2012fbc61429ab

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05/09/2024, 19:44

Target

vk_swiftshader.dll
Size

4.8MB
MD5

78063ec6110108c74579751e27276989
SHA1

89a45e07df44bfb2802938efe1415a3d9e0297f8
SHA256

56809fc84c83b7b651014df670631399546e6c335fbb69ece77681cbf0163866
SHA512

2fdc6d61a7b12c432458b9d6a47487b294f3ab0cf70650958306bdc809bdfaf27241ace9970afd8b686edd4e4ba2bd5ef7cfd5ec69fe078805f467d66efee977
SSDEEP

49152:TveyoM/h2BPSjPJEvoSNxxJanAf9dX2kcngUkomWPG2pu6n9MT5F9AZCeqx7l1Zi:jQM/agZaHt7A4P/

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2156 wrote to memory of 2484	2156	rundll32.exe	30
PID 2156 wrote to memory of 2484	2156	rundll32.exe	30
PID 2156 wrote to memory of 2484	2156	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vk_swiftshader.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2156
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2156 -s 80
  2⤵
  PID:2484