Analysis
-
max time kernel
2s -
max time network
4s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
22-03-2023 15:33
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://amzrnisgojgtgsysdmkdli4t7esh3pxkhq4ckpvx4n4dttjm-ipfs-dweb-link.translate.goog/bull.htm?_x_tr_hp=bafybeielob&_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp#[email protected]
Resource
win10v2004-20230220-en
2 signatures
150 seconds
General
-
Target
https://amzrnisgojgtgsysdmkdli4t7esh3pxkhq4ckpvx4n4dttjm-ipfs-dweb-link.translate.goog/bull.htm?_x_tr_hp=bafybeielob&_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp#[email protected]
Score
1/10
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 2 IoCs
Processes:
chrome.exedescription ioc process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe -
Suspicious use of WriteProcessMemory 2 IoCs
Processes:
chrome.exedescription pid process target process PID 1944 wrote to memory of 4264 1944 chrome.exe chrome.exe PID 1944 wrote to memory of 4264 1944 chrome.exe chrome.exe
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" "--simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT'" https://amzrnisgojgtgsysdmkdli4t7esh3pxkhq4ckpvx4n4dttjm-ipfs-dweb-link.translate.goog/bull.htm?_x_tr_hp=bafybeielob&_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en&_x_tr_pto=wapp#[email protected]1⤵
- Enumerates system info in registry
- Suspicious use of WriteProcessMemory
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff987469758,0x7ff987469768,0x7ff9874697782⤵