hxxp://euob[.]herbgreencolumn[.]com

Resubmissions

11/10/2023, 07:24

11/10/2023, 07:22

max time kernel
14s
max time network
35s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2023, 07:22

Score

1^/10

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 1580 wrote to memory of 1724	1580	msedge.exe	17
PID 1580 wrote to memory of 1724	1580	msedge.exe	17

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://euob.herbgreencolumn.com
1⤵
- Suspicious use of WriteProcessMemory
PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaba8346f8,0x7ffaba834708,0x7ffaba834718
  2⤵
  PID:1724

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2456.3.2012156977\1465963928" -childID 2 -isForBrowser -prefsHandle 932 -prefMapHandle 1384 -prefsLen 26437 -prefMapSize 232675 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {2c6c66ce-6d8f-48a5-b0d7-ec3fa99e592c} 2456 "\\.\pipe\gecko-crash-server-pipe.2456" 1012 1cb8e374958 tab
1⤵
PID:1208

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="2456.4.564977608\1675828024" -childID 3 -isForBrowser -prefsHandle 2684 -prefMapHandle 2764 -prefsLen 26437 -prefMapSize 232675 -jsInitHandle 1436 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4015ccda-bfff-4a35-942b-a01c9dcd8d57} 2456 "\\.\pipe\gecko-crash-server-pipe.2456" 3792 1cb8e36ae58 tab
1⤵
PID:2996