Resubmissions
17/12/2023, 09:23
231217-lcwf3sfee4 124/08/2023, 10:29
230824-mjle5abg93 824/08/2023, 10:11
230824-l8dwxadb9s 724/08/2023, 10:08
230824-l6nnbsbg33 123/08/2023, 12:45
230823-py9sdacc24 823/08/2023, 11:00
230823-m38prsda7y 123/08/2023, 10:49
230823-mw51asbe95 523/08/2023, 10:04
230823-l4fvpsbd49 123/08/2023, 10:04
230823-l39rdscg9s 1Analysis
-
max time kernel
1s -
max time network
10s -
platform
windows10-1703_x64 -
resource
win10-20230703-en -
resource tags
arch:x64arch:x86image:win10-20230703-enlocale:en-usos:windows10-1703-x64system -
submitted
23/08/2023, 10:04
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://google.com
Resource
win10-20230703-en
1 signatures
1800 seconds
General
-
Target
https://google.com
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 42 IoCs
description pid Process procid_target PID 516 wrote to memory of 3324 516 chrome.exe 70 PID 516 wrote to memory of 3324 516 chrome.exe 70 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 4872 516 chrome.exe 73 PID 516 wrote to memory of 1168 516 chrome.exe 72 PID 516 wrote to memory of 1168 516 chrome.exe 72
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://google.com1⤵
- Suspicious use of WriteProcessMemory
PID:516 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffcaf9c9758,0x7ffcaf9c9768,0x7ffcaf9c97782⤵PID:3324
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1904 --field-trial-handle=1784,i,16598116025649939286,12963308293862548289,131072 /prefetch:82⤵PID:1168
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1516 --field-trial-handle=1784,i,16598116025649939286,12963308293862548289,131072 /prefetch:22⤵PID:4872
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2088 --field-trial-handle=1784,i,16598116025649939286,12963308293862548289,131072 /prefetch:82⤵PID:1524
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3076 --field-trial-handle=1784,i,16598116025649939286,12963308293862548289,131072 /prefetch:12⤵PID:3716
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2936 --field-trial-handle=1784,i,16598116025649939286,12963308293862548289,131072 /prefetch:12⤵PID:4840
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4388 --field-trial-handle=1784,i,16598116025649939286,12963308293862548289,131072 /prefetch:12⤵PID:3384
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:3024