18838910634c5684dfaca94d9620316cf7ce21e85bf5a53409060a77de3c49fd | Triage

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
10-01-2025 13:23

Sharing

Report Analysis Logs

General

Target

Lunaris Executor/libEGL.dll
Size

467KB
MD5

17662d1e0a2253ec36137808e23eeceb
SHA1

51aff14e5a9511dd34168c7b66f8e1779e65bd60
SHA256

c974d5161beec3eceefafd253a77e909efe1a2906664a4021a15b0dd7d3fc06c
SHA512

7b02d36d17f35c8b48c168bb3b866a17956e1a0c16492da5742951fdefda4f8e48a155b9368cb23eadb99dc6f51e13a92525a5a82715d5501aefd21e89413307
SSDEEP

6144:juF2Dw0NiKxN6YTfDVTCanVJhPadWQo+mehJp/Ej4:60iKbbTfDVJ2dWQo+menp/EU

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1936 wrote to memory of 1532	1936	rundll32.exe	30
PID 1936 wrote to memory of 1532	1936	rundll32.exe	30
PID 1936 wrote to memory of 1532	1936	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Lunaris Executor\libEGL.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1936
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1936 -s 80
  2⤵
  PID:1532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads