6fc60098366fcadc7f08df3746881742f1fb30a91e2047b7b14951a6861dc214 | Triage

Resubmissions

28/03/2025, 09:56

250328-lybnsswnz8 3

28/03/2025, 09:55

250328-lxrcvst1fz 3

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
28/03/2025, 09:55

Sharing

Report Analysis Logs

General

Target

mozjs-60_x64.dll
Size

20.4MB
MD5

1fb3afc95969ebfd8bdebee02765f32a
SHA1

dd23623554886feeaf501c32a20896c0c067ad85
SHA256

a10694ef7d29434a0294aada97379d9ad61806fe09da6828cc9669fe1e4c7c42
SHA512

05b9192cf8f9f8ebdb64e8c53ef9a881c7b449392885ed0c4888ff1fc00c31918aef86ecac2f10f652eab428629b4e9025a87db4cf7f3ea60de56946c6625538
SSDEEP

393216:PfjKpoDpKJp39rpc7qManl3AHlH4R+CsodrgmzSBMdiXUxemfJcIWlj3qUl2n1gF:3gYynzo

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2344 wrote to memory of 2564	2344	rundll32.exe	31
PID 2344 wrote to memory of 2564	2344	rundll32.exe	31
PID 2344 wrote to memory of 2564	2344	rundll32.exe	31

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\mozjs-60_x64.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2344
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2344 -s 100
  2⤵
  PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads