3b48e8860bf29ef6191cbe0620d0e60b9014857306b955276f04703feee17300 | Triage

Analysis

max time kernel
1559s
max time network
1569s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
07/09/2024, 16:40

Sharing

Report Analysis Logs

General

Target

libGLESv2.dll
Size

7.3MB
MD5

6c16e7bdb6955ef198e66f7f690f8fc7
SHA1

cf1c0cf4ee1d1f245cdb34230f04356713493a84
SHA256

5750b05729ff3f47eef645cbccc9a61db49577965cd264dd242d1e6181f9006b
SHA512

a91240460d72207dfd513a36e02c3f2abf228725a263fd11199d4504f08604723a0e9721f20a3a28655aa19e1e23a44c31e135c9fb14cb7796219aef67caae42
SSDEEP

98304:2DRTxwF+JsIp05zu0uDqqvE9xLHvKMZ3RTtf:2DJlJsYQAqj/1p

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2272 wrote to memory of 2964	2272	rundll32.exe	30
PID 2272 wrote to memory of 2964	2272	rundll32.exe	30
PID 2272 wrote to memory of 2964	2272	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2272
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2272 -s 88
  2⤵
  PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads