9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081

Analysis

max time kernel
146s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230824-en
resource tags

arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system
submitted
25-08-2023 14:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe
Size

2.0MB
MD5

34dc3b6f5ad9472d3eee5fe006b97b4a
SHA1

ab1db703b3a1f8d5cdee2e24649b994ef4f0dd20
SHA256

9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081
SHA512

55d6e7a7c991e7de31783e32f1ca06cc3f85227ce35300325ad61877b63c72623147b82c910243a1f7db87231381f213db2ab95a1e3e586d00300ed731ae3b8f
SSDEEP

49152:OJ6ogow0HOLfdH/1AV38wQxKSgp4a05AwsXLZM47CY8BwLuRrKCLv8jY0OsOv8E5:Fo7w57bReUhhhuuJ

Score

7^/10

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4600	2BBQFKMPIBQ7N52.exe

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 552 set thread context of 1692	552	9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe	87

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	552	9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4600	2BBQFKMPIBQ7N52.exe
4600	2BBQFKMPIBQ7N52.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 552 wrote to memory of 1692	552	9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe	87
PID 552 wrote to memory of 1692	552	9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe	87
PID 552 wrote to memory of 1692	552	9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe	87
PID 552 wrote to memory of 1692	552	9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe	87
PID 552 wrote to memory of 1692	552	9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe	87
PID 552 wrote to memory of 1692	552	9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe	87
PID 552 wrote to memory of 1692	552	9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe	87
PID 552 wrote to memory of 1692	552	9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe	87
PID 552 wrote to memory of 1692	552	9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe	87
PID 1692 wrote to memory of 4600	1692	RegSvcs.exe	89
PID 1692 wrote to memory of 4600	1692	RegSvcs.exe	89

C:\Users\Admin\AppData\Local\Temp\9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe
"C:\Users\Admin\AppData\Local\Temp\9785eec1ff877367352742e441815f7f7372615e463e3a5862fa7881eb2e7081_JC.exe"
1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:552
- C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
  "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1692
- - C:\Users\Admin\AppData\Local\Temp\2BBQFKMPIBQ7N52.exe
    <!DOCTYPE html> <html lang="es"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="profile" href="http://gmpg.org/xfn/11"> <link rel="pingback" href="http://industrias-lopez.com/xmlrpc.php"> <title>Pￃﾡgina no encontrada – INDUSTRIAS LOPEZ</title> <meta name='robots' content='max-image-preview:large' /> <link rel='dns-prefetch' href='//fonts.googleapis.com' /> <link rel="alternate" type="application/rss+xml" title="INDUSTRIAS LOPEZ » Feed" href="http://industrias-lopez.com/feed/" /> <link rel="alternate" type="application/rss+xml" title="INDUSTRIAS LOPEZ » Feed de los comentarios" href="http://industrias-lopez.com/comments/feed/" /> <script type="text/javascript"> window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/svg\/","svgExt":".svg","source":{"concatemoji":"http:\/\/industrias-lopez.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.3"}}; /*! This file is auto-generated */ !function(i,n){var o,s,e;function c(e){try{var t={supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t))}catch(e){}}function p(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var t=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r=(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return e===r[t]})}function u(e,t,n){switch(t){case"flag":return n(e,"\ud83c\udff3\ufe0f\u200d\u26a7\ufe0f","\ud83c\udff3\ufe0f\u200b\u26a7\ufe0f")?!1:!n(e,"\ud83c\uddfa\ud83c\uddf3","\ud83c\uddfa\u200b\ud83c\uddf3")&&!n(e,"\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc65\udb40\udc6e\udb40\udc67\udb40\udc7f","\ud83c\udff4\u200b\udb40\udc67\u200b\udb40\udc62\u200b\udb40\udc65\u200b\udb40\udc6e\u200b\udb40\udc67\u200b\udb40\udc7f");case"emoji":return!n(e,"\ud83e\udef1\ud83c\udffb\u200d\ud83e\udef2\ud83c\udfff","\ud83e\udef1\ud83c\udffb\u200b\ud83e\udef2\ud83c\udfff")}return!1}function f(e,t,n){var r="undefined"!=typeof WorkerGlobalScope&&self instanceof WorkerGlobalScope?new OffscreenCanvas(300,150):i.createElement("canvas"),a=r.getContext("2d",{willReadFrequently:!0}),o=(a.textBaseline="top",a.font="600 32px Arial",{});return e.forEach(function(e){o[e]=t(a,e,n)}),o}function t(e){var t=i.createElement("script");t.src=e,t.defer=!0,i.head.appendChild(t)}"undefined"!=typeof Promise&&(o="wpEmojiSettingsSupports",s=["flag","emoji"],n.supports={everything:!0,everythingExceptFlag:!0},e=new Promise(function(e){i.addEventListener("DOMContentLoaded",e,{once:!0})}),new Promise(function(t){var n=function(){try{var e=JSON.parse(sessionStorage.getItem(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefined"!=typeof Worker&&"undefined"!=typeof OffscreenCanvas&&"undefined"!=typeof URL&&URL.createObjectURL&&"undefined"!=typeof Blob)try{var e="postMessage("+f.toString()+"("+[JSON.stringify(s),u.toString(),p.toString()].join(",")+"));",r=new Blob([e],{type:"text/javascript"}),a=new Worker(URL.createObjectURL(r),{name:"wpTestEmojiSupports"});return void(a.onmessage=function(e){c(n=e.data),a.terminate(),t(n)})}catch(e){}c(n=f(s,u,p))}t(n)}).then(function(e){for(var t in e)n.supports[t]=e[t],n.supports.everything=n.supports.everything&&n.supports[t],"flag"!==t&&(n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&n.supports[t]);n.supports.everythingExceptFlag=n.supports.everythingExceptFlag&&!n.supports.flag,n.DOMReady=!1,n.readyCallback=function(){n.DOMReady=!0}}).then(function(){return e}).then(function(){var e;n.supports.everything||(n.readyCallback(),(e=n.source||{}).concatemoji?t(e.concatemoji):e.wpemoji&&e.twemoji&&(t(e.twemoji),t(e.wpemoji)))}))}((window,document),window._wpemojiSettings); </script> <style type="text/css"> img.wp-smiley, img.emoji { display: inline !important; border: none !important; box-shadow: none !important; height: 1em !important; width: 1em !important; margin: 0 0.07em !important; vertical-align: -0.1em !important; background: none !important; padding: 0 !important; } </style> <link rel='stylesheet' id='sydney-wc-css-css' href='http://industrias-lopez.com/wp-content/themes/sydney/woocommerce/css/wc.css?ver=6.3' type='text/css' media='all' /> <link rel='stylesheet' id='sydney-bootstrap-css' href='http://industrias-lopez.com/wp-content/themes/sydney/css/bootstrap/bootstrap.min.css?ver=1' type='text/css' media='all' /> <link rel='stylesheet' id='wp-block-library-css' href='http://industrias-lopez.com/wp-includes/css/dist/block-library/style.min.css?ver=6.3' type='text/css' media='all' /> <link rel='stylesheet' id='wc-block-style-css' href='http://industrias-lopez.com/wp-content/plugins/woocommerce/assets/css/blocks/style.css?ver=3.6.7' type='text/css' media='all' /> <style id='classic-theme-styles-inline-css' type='text/css'> /*! This file is auto-generated */ .wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none} </style> <style id='global-styles-inline-css' type='text/css'> body{--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 13px;--wp--preset--font-size--medium: 20px;--wp--preset--font-size--large: 36px;--wp--preset--font-size--x-large: 42px;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60: 2.25rem;--wp--preset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6px rgba(0, 0, 0, 1);--wp--preset--shadow--crisp: 6px 6px 0px rgba(0, 0, 0, 1);}:where(.is-layout-flex){gap: 0.5em;}:where(.is-layout-grid){gap: 0.5em;}body .is-layout-flow > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-flow > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-flow > .aligncenter{margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-constrained > .aligncenter{margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > :where(:not(.alignleft):not(.alignright):not(.alignfull)){max-width: var(--wp--style--global--content-size);margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignwide{max-width: var(--wp--style--global--wide-size);}body .is-layout-flex{display: flex;}body .is-layout-flex{flex-wrap: wrap;align-items: center;}body .is-layout-flex > *{margin: 0;}body .is-layout-grid{display: grid;}body .is-layout-grid > *{margin: 0;}:where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-color{color: var(--wp--preset--color--vivid-purple) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivid-green-cyan-gradient-background{background: var(--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background: var(--wp--preset--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;} .wp-block-navigation a:where(:not(.wp-element-button)){color: inherit;} :where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;} :where(.wp-block-columns.is-layout-flex){gap: 2em;}:where(.wp-block-columns.is-layout-grid){gap: 2em;} .wp-block-pullquote{font-size: 1.5em;line-height: 1.6;} </style> <link rel='stylesheet' id='ccw_main_css-css' href='http://industrias-lopez.com/wp-content/plugins/click-to-chat-for-whatsapp/assets/css/mainstyles.css?ver=1.6' type='text/css' media='all' /> <link rel='stylesheet' id='woocommerce-layout-css' href='http://industrias-lopez.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=3.6.7' type='text/css' media='all' /> <link rel='stylesheet' id='woocommerce-smallscreen-css' href='http://industrias-lopez.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=3.6.7' type='text/css' media='only screen and (max-width: 768px)' /> <style id='woocommerce-inline-inline-css' type='text/css'> .woocommerce form .form-row .required { visibility: visible; } </style> <link rel='stylesheet' id='sydney-fonts-css' href='https://fonts.googleapis.com/css?family=Source+Sans+Pro%3A400%2C400italic%2C600%7CRaleway%3A400%2C500%2C600' type='text/css' media='all' /> <link rel='stylesheet' id='sydney-style-css' href='http://industrias-lopez.com/wp-content/themes/sydney/style.css?ver=20180710' type='text/css' media='all' /> <style id='sydney-style-inline-css' type='text/css'> .site-header { background-color:rgba(30,115,190,0.9);} .site-title { font-size:32px; } .site-description { font-size:16px; } #mainnav ul li a { font-size:14px; } h1 { font-size:52px; } h2 { font-size:42px; } h3 { font-size:32px; } h4 { font-size:25px; } h5 { font-size:20px; } h6 { font-size:18px; } body { font-size:16px; } .single .hentry .title-post { font-size:36px; } .header-image { background-size:cover;} .header-image { height:300px; } .site-header.float-header { background-color:rgba(30,115,190,0.9);} @media only screen and (max-width: 1024px) { .site-header { background-color:#1e73be;}} .site-title a, .site-title a:hover { color:#ffffff} .site-description { color:#ffffff} #mainnav ul li a, #mainnav ul li::before { color:#000000} #mainnav .sub-menu li a { color:#6391bf} #mainnav .sub-menu li a { background:#1e73be} .text-slider .maintitle, .text-slider .subtitle { color:#ffffff} body { color:#47425d} #secondary { background-color:#ffffff} #secondary, #secondary a, #secondary .widget-title { color:#767676} .footer-widgets { background-color:#1e73be} .btn-menu { color:#ffffff} #mainnav ul li a:hover { color:#d65050} .site-footer { background-color:#1e73be} .site-footer,.site-footer a { color:#1e73be} .overlay { background-color:#000000} .page-wrap { padding-top:0px;} .page-wrap { padding-bottom:0px;} @media only screen and (max-width: 1025px) { .mobile-slide { display: block; } .slide-item { background-image: none !important; } .header-slider { } .slide-item { height: auto !important; } .slide-inner { min-height: initial; } } @media only screen and (max-width: 780px) { h1 { font-size: 32px;} h2 { font-size: 28px;} h3 { font-size: 22px;} h4 { font-size: 18px;} h5 { font-size: 16px;} h6 { font-size: 14px;} } </style> <link rel='stylesheet' id='sydney-font-awesome-css' href='http://industrias-lopez.com/wp-content/themes/sydney/fonts/font-awesome.min.css?ver=6.3' type='text/css' media='all' />  <script type='text/javascript' src='http://industrias-lopez.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.0' id='jquery-core-js'></script> <script type='text/javascript' src='http://industrias-lopez.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1' id='jquery-migrate-js'></script> <script type='text/javascript' id='pirate-forms-custom-spam-js-extra'> /* <![CDATA[ */ var pf = {"spam":{"label":"\u00a1Soy un humano!","value":"33f5f8c141"}}; /* ]]> */ </script> <script type='text/javascript' src='http://industrias-lopez.com/wp-content/plugins/pirate-forms/public/js/custom-spam.js?ver=6.3' id='pirate-forms-custom-spam-js'></script> <link rel="https://api.w.org/" href="http://industrias-lopez.com/wp-json/" /><link rel="EditURI" type="application/rsd+xml" title="RSD" href="http://industrias-lopez.com/xmlrpc.php?rsd" /> <meta name="generator" content="WordPress 6.3" /> <meta name="generator" content="WooCommerce 3.6.7" /> <noscript><style>.woocommerce-product-gallery{ opacity: 1 !important; }</style></noscript> <link rel="icon" href="http://industrias-lopez.com/wp-content/uploads/2019/04/cropped-logo-industrias-lopez-32x32.jpg" sizes="32x32" /> <link rel="icon" href="http://industrias-lopez.com/wp-content/uploads/2019/04/cropped-logo-industrias-lopez-192x192.jpg" sizes="192x192" /> <link rel="apple-touch-icon" href="http://industrias-lopez.com/wp-content/uploads/2019/04/cropped-logo-industrias-lopez-180x180.jpg" /> <meta name="msapplication-TileImage" content="http://industrias-lopez.com/wp-content/uploads/2019/04/cropped-logo-industrias-lopez-270x270.jpg" /> </head> <body class="error404 woocommerce-no-js elementor-default"> <div class="preloader"> <div class="spinner"> <div class="pre-bounce1"></div> <div class="pre-bounce2"></div> </div> </div> <div id="page" class="hfeed site"> <a class="skip-link screen-reader-text" href="#content">Saltar al contenido</a> <div class="header-clone"></div> <header id="masthead" class="site-header" role="banner"> <div class="header-wrap"> <div class="container"> <div class="row"> <div class="col-md-4 col-sm-8 col-xs-12"> <a href="http://industrias-lopez.com/" title="INDUSTRIAS LOPEZ"><img class="site-logo" src="http://industrias-lopez.com/wp-content/uploads/2019/04/logo-industrias-lopez.jpg" alt="INDUSTRIAS LOPEZ" /></a> </div> <div class="col-md-8 col-sm-4 col-xs-12"> <div class="btn-menu"></div> <nav id="mainnav" class="mainnav" role="navigation"> <div class="menu-menu-principal-container"><ul id="menu-menu-principal" class="menu"><li id="menu-item-425" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-home menu-item-425"><a href="http://industrias-lopez.com/">Inicio</a></li> <li id="menu-item-66" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-66"><a href="http://industrias-lopez.com/quienes-somos/">Quienes Somos</a></li> <li id="menu-item-64" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-64"><a href="http://industrias-lopez.com/contacto/">Contacto</a></li> <li id="menu-item-367" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-367"><a href="http://industrias-lopez.com/inicio/tienda/">Tienda</a></li> </ul></div> </nav> </div> </div> </div> </div> </header> <div class="sydney-hero-area"> <div class="header-image"> <img class="header-inner" src="http://industrias-lopez.com/wp-content/themes/sydney/images/header.jpg" width="1920" alt="INDUSTRIAS LOPEZ" title="INDUSTRIAS LOPEZ"> </div> </div> <div id="content" class="page-wrap"> <div class="container content-wrapper"> <div class="row"> <div id="primary" class="content-area fullwidth"> <main id="main" class="site-main" role="main"> <section class="error-404 not-found"> <header class="page-header"> <h1 class="page-title">ￂﾡVaya! Estￃﾡ pￃﾡgina no se encuentra.</h1> </header> <div class="page-content"> <p>Parece que no se encontrￃﾳ nada aquￃﾭ. ￂ﾿Quieres probar uno de los enlaces de abajo o una bￃﾺsqueda?</p> <form role="search" method="get" class="search-form" action="http://industrias-lopez.com/"> <label> <span class="screen-reader-text">Buscar:</span> <input type="search" class="search-field" placeholder="Buscar …" value="" name="s" /> </label> <input type="submit" class="search-submit" value="Buscar" /> </form> </div> </section> </main> </div> </div> </div> </div> <a class="go-top"><i class="fa fa-angle-up"></i></a> <footer id="colophon" class="site-footer" role="contentinfo"> <div class="site-info container"> <p class="has-text-color has-very-light-gray-color"> Copyright ￂﾩ 2019 INDUSTRIAS LOPEZ S.A. All Rights Reserved. Designed by [email protected]. </p> </div> </footer> </div>  <div class="ccw_plugin"> <div class="chatbot btn_only_style_div pointer ccw-analytics animated no-animation ccw-no-hover-an" id="style-7" data-ccw="style-7" style="top:10px; left:10px; background-color: #25D366; height: 48px; width: 48px; line-height: 48px; " onmouseover = "this.style.backgroundColor = '#00e51e', document.getElementsByClassName('ccw-s7-icon')[0].style.color = '#000' " onmouseout = "this.style.backgroundColor = '#25D366', document.getElementsByClassName('ccw-s7-icon')[0].style.color = '#fff' " onclick = "window.open('https://web.whatsapp.com/send?phone=+50587878093&text=Estimado, es un gusto atenderle', '_blank')" > <span class="icon icon-whatsapp2 ccw-s7-icon nofocus ccw-analytics" id="s7-icon" data-ccw="style-7" style="color: #fff; font-size: 24px;"></span>  </div> </div> <script type="text/javascript"> var c = document.body.className; c = c.replace(/woocommerce-no-js/, 'woocommerce-js'); document.body.className = c; </script> <script type='text/javascript' id='ccw_app-js-extra'> /* <![CDATA[ */ var ht_ccw_var = {"page_title":"","google_analytics":"","ga_category":"","ga_action":"","ga_label":"","fb_analytics":"","fb_event_name":"","p1_value":"","p2_value":"","p3_value":"","p1_name":"","p2_name":"","p3_name":""}; /* ]]> */ </script> <script type='text/javascript' src='http://industrias-lopez.com/wp-content/plugins/click-to-chat-for-whatsapp/assets/js/app.js?ver=1.6' id='ccw_app-js'></script> <script type='text/javascript' src='http://industrias-lopez.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70' id='jquery-blockui-js'></script> <script type='text/javascript' id='wc-add-to-cart-js-extra'> /* <![CDATA[ */ var wc_add_to_cart_params = {"ajax_url":"\/wp-admin\/admin-ajax.php","wc_ajax_url":"\/?wc-ajax=%%endpoint%%","i18n_view_cart":"Ver carrito","cart_url":"http:\/\/industrias-lopez.com\/carrito\/","is_cart":"","cart_redirect_after_add":"no"}; /* ]]> */ </script> <script type='text/javascript' src='http://industrias-lopez.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=3.6.7' id='wc-add-to-cart-js'></script> <script type='text/javascript' src='http://industrias-lopez.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4' id='js-cookie-js'></script> <script type='text/javascript' id='woocommerce-js-extra'> /* <![CDATA[ */ var woocommerce_params = {"ajax_url":"\/wp-admin\/admin-ajax.php","wc_ajax_url":"\/?wc-ajax=%%endpoint%%"}; /* ]]> */ </script> <script type='text/javascript' src='http://industrias-lopez.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=3.6.7' id='woocommerce-js'></script> <script type='text/javascript' id='wc-cart-fragments-js-extra'> /* <![CDATA[ */ var wc_cart_fragments_params = {"ajax_url":"\/wp-admin\/admin-ajax.php","wc_ajax_url":"\/?wc-ajax=%%endpoint%%","cart_hash_key":"wc_cart_hash_74a9ada0b5154175a12a86ffdaa06899","fragment_name":"wc_fragments_74a9ada0b5154175a12a86ffdaa06899","request_timeout":"5000"}; /* ]]> */ </script> <script type='text/javascript' src='http://industrias-lopez.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=3.6.7' id='wc-cart-fragments-js'></script> <script type='text/javascript' src='http://industrias-lopez.com/wp-content/themes/sydney/js/scripts.js?ver=6.3' id='sydney-scripts-js'></script> <script type='text/javascript' src='http://industrias-lopez.com/wp-content/themes/sydney/js/main.min.js?ver=20180716' id='sydney-main-js'></script> <script type='text/javascript' src='http://industrias-lopez.com/wp-content/themes/sydney/js/skip-link-focus-fix.js?ver=20130115' id='sydney-skip-link-focus-fix-js'></script> </body> </html>
    3⤵
    - Executes dropped EXE
    - Suspicious use of SetWindowsHookEx
    PID:4600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\2BBQFKMPIBQ7N52.exe

Filesize
8KB

MD5
8719ce641e7c777ac1b0eaec7b5fa7c7

SHA1
c04de52cb511480cc7d00d67f1d9e17b02d6406b

SHA256
6283ac6ecbf4c4038cf44896dd221c7c11152bac77273709330409032c3e72ea

SHA512
7be5bd6d2342dd02818f1979e7e74a6376658711ac82a59b2af1a67207cfd3c7416b657af01216473b15132e4aa5c6675f0eb8ee6343192c7dfc4a5249ccaa97

Download Submit
C:\Users\Admin\AppData\Local\Temp\2BBQFKMPIBQ7N52.exe

Filesize
8KB

MD5
8719ce641e7c777ac1b0eaec7b5fa7c7

SHA1
c04de52cb511480cc7d00d67f1d9e17b02d6406b

SHA256
6283ac6ecbf4c4038cf44896dd221c7c11152bac77273709330409032c3e72ea

SHA512
7be5bd6d2342dd02818f1979e7e74a6376658711ac82a59b2af1a67207cfd3c7416b657af01216473b15132e4aa5c6675f0eb8ee6343192c7dfc4a5249ccaa97

Download Submit
C:\Users\Admin\AppData\Local\Temp\40LG8JQ711GO97P.exe

Filesize
27KB

MD5
8bc80518d4613c5e8875fce3528a711f

SHA1
7dd98f080d5887fa1576a6bac31d50fd631a1e52

SHA256
6a10362ac27333080115541e4d157a52cb9233ccf909f22b672eb815739d03e1

SHA512
0129f1c2a9f65e9e3a1add5844d2e13318ff858587f3d63fcf33099cdfe5a0cc32cd77499aa940968f4c670aff13138c71c32df3c67fddfb266ab250fc90701a

Download Submit
memory/552-10-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-1-0x0000000000C90000-0x0000000000E94000-memory.dmp

Filesize
2.0MB

Download
memory/552-5-0x0000000075200000-0x00000000759B0000-memory.dmp

Filesize
7.7MB

Download
memory/552-6-0x0000000005A10000-0x0000000005A20000-memory.dmp

Filesize
64KB

Download
memory/552-7-0x0000000006660000-0x0000000006C04000-memory.dmp

Filesize
5.6MB

Download
memory/552-8-0x0000000005A20000-0x0000000005AB2000-memory.dmp

Filesize
584KB

Download
memory/552-9-0x0000000005B90000-0x0000000005C5E000-memory.dmp

Filesize
824KB

Download
memory/552-0-0x0000000075200000-0x00000000759B0000-memory.dmp

Filesize
7.7MB

Download
memory/552-11-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-13-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-19-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-17-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-15-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-34-0x00000000059A0000-0x00000000059A1000-memory.dmp

Filesize
4KB

Download
memory/552-23-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-25-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-27-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-29-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-31-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-33-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-21-0x0000000005960000-0x0000000005975000-memory.dmp

Filesize
84KB

Download
memory/552-4-0x0000000005A10000-0x0000000005A20000-memory.dmp

Filesize
64KB

Download
memory/552-2-0x0000000005880000-0x000000000591C000-memory.dmp

Filesize
624KB

Download
memory/552-3-0x0000000006040000-0x0000000006658000-memory.dmp

Filesize
6.1MB

Download
memory/552-40-0x0000000075200000-0x00000000759B0000-memory.dmp

Filesize
7.7MB

Download
memory/1692-38-0x0000000000400000-0x0000000000492000-memory.dmp

Filesize
584KB

Download
memory/1692-37-0x0000000000400000-0x0000000000492000-memory.dmp

Filesize
584KB

Download
memory/1692-36-0x0000000000400000-0x0000000000492000-memory.dmp

Filesize
584KB

Download
memory/1692-35-0x0000000000400000-0x0000000000492000-memory.dmp

Filesize
584KB

Download
memory/1692-63-0x0000000000400000-0x0000000000492000-memory.dmp

Filesize
584KB

Download
memory/4600-66-0x00000180B5FF0000-0x00000180B6000000-memory.dmp

Filesize
64KB

Download
memory/4600-65-0x00007FFA42AD0000-0x00007FFA43591000-memory.dmp

Filesize
10.8MB

Download
memory/4600-64-0x000001809B970000-0x000001809B976000-memory.dmp

Filesize
24KB

Download
memory/4600-67-0x00000180B5FF0000-0x00000180B6000000-memory.dmp

Filesize
64KB

Download
memory/4600-73-0x00007FFA42AD0000-0x00007FFA43591000-memory.dmp

Filesize
10.8MB

Download
memory/4600-74-0x00000180B5FF0000-0x00000180B6000000-memory.dmp

Filesize
64KB

Download
memory/4600-75-0x00000180B6000000-0x00000180B61A9000-memory.dmp

Filesize
1.7MB

Download
memory/4600-76-0x00000180B5FF0000-0x00000180B6000000-memory.dmp

Filesize
64KB

Download
memory/4600-77-0x00000180B5FF0000-0x00000180B6000000-memory.dmp

Filesize
64KB

Download