Overview
overview
3Static
static
Data/xulru...al.dll
windows7-x64
1Data/xulru...al.dll
windows10-2004-x64
1Data/xulru...43.dll
windows7-x64
3Data/xulru...43.dll
windows10-2004-x64
3Data/xulru...al.dll
windows7-x64
1Data/xulru...al.dll
windows10-2004-x64
1Data/xulru...NF.dll
windows7-x64
1Data/xulru...NF.dll
windows10-2004-x64
1Data/xulru...or.dll
windows7-x64
1Data/xulru...or.dll
windows10-2004-x64
3Data/xulru...er.exe
windows7-x64
1Data/xulru...er.exe
windows10-2004-x64
1Data/xulru...l3.dll
windows7-x64
1Data/xulru...l3.dll
windows10-2004-x64
1Data/xulru...as.dll
windows7-x64
3Data/xulru...as.dll
windows10-2004-x64
3Data/xulru...gdb.py
windows7-x64
3Data/xulru...gdb.py
windows10-2004-x64
3Data/xulrunner/js.exe
windows7-x64
1Data/xulrunner/js.exe
windows10-2004-x64
1Data/xulru...GL.dll
windows7-x64
1Data/xulru...GL.dll
windows10-2004-x64
1Data/xulru...v2.dll
windows7-x64
1Data/xulru...v2.dll
windows10-2004-x64
1Data/xulru...oc.dll
windows7-x64
3Data/xulru...oc.dll
windows10-2004-x64
1Data/xulru...ue.dll
windows7-x64
3Data/xulru...ue.dll
windows10-2004-x64
3Data/xulru...js.dll
windows7-x64
3Data/xulru...js.dll
windows10-2004-x64
1Data/xulru...00.dll
windows7-x64
3Data/xulru...00.dll
windows10-2004-x64
3Analysis
-
max time kernel
9s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
24-10-2022 03:44
Static task
static1
Behavioral task
behavioral1
Sample
Data/xulrunner/AccessibleMarshal.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral2
Sample
Data/xulrunner/AccessibleMarshal.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Data/xulrunner/D3DCompiler_43.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral4
Sample
Data/xulrunner/D3DCompiler_43.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Data/xulrunner/IA2Marshal.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral6
Sample
Data/xulrunner/IA2Marshal.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Data/xulrunner/SNF.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral8
Sample
Data/xulrunner/SNF.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Data/xulrunner/breakpadinjector.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral10
Sample
Data/xulrunner/breakpadinjector.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
Data/xulrunner/crashreporter.exe
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral12
Sample
Data/xulrunner/crashreporter.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
Data/xulrunner/freebl3.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral14
Sample
Data/xulrunner/freebl3.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Data/xulrunner/gkmedias.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral16
Sample
Data/xulrunner/gkmedias.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Data/xulrunner/js-gdb.py
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral18
Sample
Data/xulrunner/js-gdb.py
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Data/xulrunner/js.exe
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral20
Sample
Data/xulrunner/js.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Data/xulrunner/libEGL.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral22
Sample
Data/xulrunner/libEGL.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Data/xulrunner/libGLESv2.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral24
Sample
Data/xulrunner/libGLESv2.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Data/xulrunner/mozalloc.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral26
Sample
Data/xulrunner/mozalloc.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Data/xulrunner/mozglue.dll
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral28
Sample
Data/xulrunner/mozglue.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Data/xulrunner/mozjs.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral30
Sample
Data/xulrunner/mozjs.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Data/xulrunner/msvcp100.dll
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral32
Sample
Data/xulrunner/msvcp100.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
General
-
Target
Data/xulrunner/crashreporter.exe
-
Size
106KB
-
MD5
ecc61b4512850bc6d8f049b9c679d2cc
-
SHA1
3ff5c65e9bffbf1bad7325b3ee4e421085ce6bc2
-
SHA256
c893d110fa41f8c40b919bb64a34a0efac947abbdd6ce49541f02d5580b848a3
-
SHA512
6aaa3ca962865d82b14e2947b580b7004bddc40211ab6b899d199dcd4de356fb26eb35eaf2eca816876a39fafdc74bfe7396205a32b9db6d937a661873b438d7
-
SSDEEP
3072:k3k+2f8g04Ok7WuWlH00SwFLZb+o4OkSV0ZhuW+jc:k3k+2104OkKdfLZb+tOkSMu
Malware Config
Signatures
-
Modifies registry class 5 IoCs
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000_CLASSES\Applications\crashreporter.exe\NoOpenWith = "0" crashreporter.exe Set value (int) \REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000_CLASSES\Applications\crashreporter.exe\NoStartPage = "0" crashreporter.exe Key created \REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000_CLASSES\Applications crashreporter.exe Key created \REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000_CLASSES\Applications\crashreporter.exe crashreporter.exe Set value (int) \REGISTRY\USER\S-1-5-21-3845472200-3839195424-595303356-1000_CLASSES\Applications\crashreporter.exe\IsHostApp = "0" crashreporter.exe