b902902f414d71f99254b009d971eb2031a06cba1196695adc4568830ccbd9b0

Analysis

max time kernel
13s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
24-10-2022 03:44

Target

Data/xulrunner/mozjs.dll
Size

3.2MB
MD5

0270b2224b1e40c0b55679d26822973f
SHA1

eef92b8530e54c12d6b501f27fc0912994b46670
SHA256

a97915d60a7919221a7608af09d2ade1c226e6c73fd66f65e1420be431e9b8da
SHA512

6d6c148e877f108cde20629a821ff9b05ce7bc095e88bf9ff592b5df5694d36eda65ffccaf8d557bd386318dd996168f1726b15dc69d027696211254099699ef
SSDEEP

49152:eKSr5E1VNygpMDxdiuHSZ2b6sejyF4IsMaiAtliL75UrAOPzK:e9reZ2mssyG1VrA

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1692	112	WerFault.exe	26

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1056 wrote to memory of 112	1056	rundll32.exe	26
PID 1056 wrote to memory of 112	1056	rundll32.exe	26
PID 1056 wrote to memory of 112	1056	rundll32.exe	26
PID 1056 wrote to memory of 112	1056	rundll32.exe	26
PID 1056 wrote to memory of 112	1056	rundll32.exe	26
PID 1056 wrote to memory of 112	1056	rundll32.exe	26
PID 1056 wrote to memory of 112	1056	rundll32.exe	26
PID 112 wrote to memory of 1692	112	rundll32.exe	27
PID 112 wrote to memory of 1692	112	rundll32.exe	27
PID 112 wrote to memory of 1692	112	rundll32.exe	27
PID 112 wrote to memory of 1692	112	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Data\xulrunner\mozjs.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1056
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Data\xulrunner\mozjs.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:112
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 112 -s 232
    3⤵
    - Program crash
    PID:1692

memory/112-55-0x0000000076681000-0x0000000076683000-memory.dmp

Filesize
8KB

Download