517b6a097c3c3f94a2321780bd254d6ec5f4fbf5da66ac5ab9d7328ce0acad0a | Triage

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08-01-2025 18:36

Sharing

Report Analysis Logs

General

Target

opengl32sw.dll
Size

20.0MB
MD5

7dbc97bfee0c7ac89da8d0c770c977b6
SHA1

a064c8d8967aaa4ada29bd9fefbe40405360412c
SHA256

963641a718f9cae2705d5299eae9b7444e84e72ab3bef96a691510dd05fa1da4
SHA512

286997501e1f5ce236c041dcb1a225b4e01c0f7c523c18e9835507a15c0ac53c4d50f74f94822125a7851fe2cb2fb72f84311a2259a5a50dce6f56ba05d1d7e8
SSDEEP

393216:LIckHor5uLnn83wAP5hxOZEa7/LzRuDFqILn5LgcKyZyQXt+8M:yEZbv

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5012	rundll32.exe
5012	rundll32.exe

Suspicious use of SetWindowsHookEx 9 IoCs

pid	Process
5012	rundll32.exe
5012	rundll32.exe
5012	rundll32.exe
5012	rundll32.exe
5012	rundll32.exe
5012	rundll32.exe
5012	rundll32.exe
5012	rundll32.exe
5012	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\opengl32sw.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:5012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads