acb4464c86b943e6626708dda4e36ab0e44131f5f76f44c36463492f86e995dc

Analysis

max time kernel
3s
max time network
43s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
29/09/2024, 21:33

Target

SilverBullet/x64/libGLESv2.dll
Size

7.6MB
MD5

d000fcff1ee69ef88fcce9aee41f2b83
SHA1

4980f29eba427f48c643513b1166e9d3052c8565
SHA256

90ac87ebb1c099a84e88618e10e2301553373ef586315ac39aac13f1f6c77609
SHA512

3645399b28fec183968772c91e0d30e6d375c64aee05e388f89bc510a2f9977636f3b0cfabdb6ece69454fd09d015ee4f192368e48d350a6fa8ce637f0274432
SSDEEP

49152:/TxmC0U/qEuc71Ixe27E4X1v4VyzVJIE69N0B4tl1UTDucaKSjYX61clB/iLdv7R:WQ27Ntc14yMOlP/t9cxdFu2xY

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2552 wrote to memory of 2332	2552	rundll32.exe	29
PID 2552 wrote to memory of 2332	2552	rundll32.exe	29
PID 2552 wrote to memory of 2332	2552	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SilverBullet\x64\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2552
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2552 -s 92
  2⤵
  PID:2332