30863f7a149c41c3edb9537a1e93321faab3c68fed49cccbaeddb099388b14ac | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
08-09-2024 18:05

Sharing

Report Analysis Logs

General

Target

libGLESv2.dll
Size

7.3MB
MD5

b69d1fe22c9921824f404af5947b66f5
SHA1

ce998ee9fd8116e31773620deb8056c55c507ab8
SHA256

14a03f20123021134dfc366455c59349a2fe082ffef81aeb54826a226248c43f
SHA512

1461e71f6fe22d31cfe328d96d53d1aad2ec2139156c90a9121bcb0f70faf3ed0a85143749b71ba8ec9a9f0355cc9960f25a117110bd62a14a45536f67f04484
SSDEEP

98304:u99bSJY8juRSvODN1uVZ5U7NJhbXm3fo:ueu8iEOx73hzCfo

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 2092	2108	rundll32.exe	30
PID 2108 wrote to memory of 2092	2108	rundll32.exe	30
PID 2108 wrote to memory of 2092	2108	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2108 -s 88
  2⤵
  PID:2092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads