Analysis
-
max time kernel
52s -
max time network
92s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
24-11-2022 19:20
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.dvlottery.state.gov/
Resource
win7-20221111-en
windows7-x64
5 signatures
30 seconds
Behavioral task
behavioral2
Sample
https://www.dvlottery.state.gov/
Resource
win10v2004-20221111-en
windows10-2004-x64
1 signatures
30 seconds
General
-
Target
https://www.dvlottery.state.gov/
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
chrome.exechrome.exedescription pid process target process PID 2736 wrote to memory of 4428 2736 chrome.exe chrome.exe PID 2736 wrote to memory of 4428 2736 chrome.exe chrome.exe PID 4032 wrote to memory of 3688 4032 chrome.exe chrome.exe PID 4032 wrote to memory of 3688 4032 chrome.exe chrome.exe
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.dvlottery.state.gov/1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd9f634f50,0x7ffd9f634f60,0x7ffd9f634f702⤵
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd9f634f50,0x7ffd9f634f60,0x7ffd9f634f702⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.datFilesize
40B
MD5709abe60edd890aec38f0de2343a5555
SHA1d345fca81f82a2b38a1398aa8ec70ff8b25bede3
SHA2561b2a19aecb8e0405a1a1b108a895473188621fb0733d2f1b924f95475d3d442c
SHA512ed7a4800945492d73f44ec50353dd68625a4027433b8b4482c6e10110e0d2adb79bce1e74747d74305c32204385191b409c2c5d718e2d383b370e0f7e29dd200