7c5049b97fb6065b0797da5eca6c94578478cd87e4ae176c68a8bf17f6b03d4a | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
07-01-2025 00:04

Sharing

Report Analysis Logs

General

Target

dll/libGLESv2.dll
Size

6.5MB
MD5

266201bab198487bb26d195a32f07f5d
SHA1

a490e3eb5ac726cb865636b627c390f8790d84bc
SHA256

a69cf85207d41457d4c0aaeec87206de23768681c0c538db84da59f0ca51af0d
SHA512

39835bdef860f268974d8e77eb7aefd19d9685c56c8e7737ef0294469def3d89ac7b912f4cf407577971009eb60086d65a33fa89ddf26b999ccc51d81cc14121
SSDEEP

98304:W0TIBzQCqrJFhfbifS3HvCN9MqDHBIpeyxUT:jTIlQCqrJOa3o9MQj

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2528 wrote to memory of 2320	2528	rundll32.exe	30
PID 2528 wrote to memory of 2320	2528	rundll32.exe	30
PID 2528 wrote to memory of 2320	2528	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\dll\libGLESv2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2528
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2528 -s 88
  2⤵
  PID:2320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads