d1d620a61f00160ea1d9688cbd1a9455f5e77a539f456922abb0ba251fd296e8 | Triage

Analysis

max time kernel
122s
max time network
135s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
14-09-2024 02:46

Sharing

Report Analysis Logs

General

Target

libGLESv2.dll
Size

7.3MB
MD5

596379ba25b32e95b5ec3cd8028b291b
SHA1

af61b5d29db91997e29ffed8a410d09ce74ee51e
SHA256

d5e1d7b8531a0f4ab576ba6f78d4c63b39186a2830d313c6695f0024c9ef627a
SHA512

f8835b455820c77b4ba509c326a185bf65131242161498229c5e3584a0e7789324932b95678556a657440deaf067ead454e85bf8233efa24162e7e4d9eaf417b
SSDEEP

98304:AwY1sQqaLe2Egto8U4r5Pp6TlITQZ38W888888888tb8dii:vNaSgtvroZ8

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 2496	2204	rundll32.exe	31
PID 2204 wrote to memory of 2496	2204	rundll32.exe	31
PID 2204 wrote to memory of 2496	2204	rundll32.exe	31

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2204 -s 88
  2⤵
  PID:2496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads