Overview

overview

1

Static

static

1

URLScan

urlscan

1

https://megavia.net....

windows7-x64

1

Analysis

  • max time kernel
    77s
  • max time network
    329s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    03-10-2023 06:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    https://megavia.net.br/megbr/host22.01/admin/js/mf.php?id=T3tlNz

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://megavia.net.br/megbr/host22.01/admin/js/mf.php?id=T3tlNz
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2024
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef7409758,0x7fef7409768,0x7fef7409778
      2⤵
        PID:2752
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1136 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:2
        2⤵
          PID:1668
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1492 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:8
          2⤵
            PID:2768
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1584 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:8
            2⤵
              PID:2976
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2340 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:1
              2⤵
                PID:2800
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2328 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:1
                2⤵
                  PID:2636
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2856 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:2
                  2⤵
                    PID:2064
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1252 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:2
                    2⤵
                      PID:1820
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3488 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:8
                      2⤵
                        PID:1040
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3656 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:1
                        2⤵
                          PID:544
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=1948 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:1
                          2⤵
                            PID:2280
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --mojo-platform-channel-handle=2036 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:1
                            2⤵
                              PID:2252
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=2676 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:1
                              2⤵
                                PID:1304
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=2440 --field-trial-handle=1320,i,11951700307310352384,2609620387596145915,131072 /prefetch:1
                                2⤵
                                  PID:2376
                              • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                1⤵
                                  PID:1836

                                Network

                                MITRE ATT&CK Enterprise v15

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                  Filesize

                                  344B

                                  MD5

                                  5fe8117342492c2f601e1874b5348f66

                                  SHA1

                                  3740977cba231e4c177b458b6c9516528c025cc6

                                  SHA256

                                  c99e1171fcf6ae2995f52dda67429c8dfc318ea1fc203d61fe0717a77b608cbf

                                  SHA512

                                  db7629e1c4ccdbb974b64b8dcba4385087344f2f4bb26b373e2ad7898a7eed97267b6c7b17886c24761c1598c14d39401d9e7711fda1c27ca327b9ab7d303067

                                  Download Submit

                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                  Filesize

                                  344B

                                  MD5

                                  a6c7f3ed5a9e3a8d807bb2179ea913fa

                                  SHA1

                                  9aff689fe9a786c66ccb0e40e004f9f9f91ef19c

                                  SHA256

                                  a2c4adad7ea26ce86087838335407f8693edc9792fea824fad21a0b66dc64102

                                  SHA512

                                  5a35e455b80b93afd668d3c21f38b10ce186e7cfe9238411a95f6e3da1cce810c7a50801a97313448a81c34c5a1ab5c996e283ddfbbf98a2eb1102de3371a163

                                  Download Submit

                                • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                  Filesize

                                  344B

                                  MD5

                                  36d8c73c98c752cf8413377c8b7b2c74

                                  SHA1

                                  8ac7391963a40e99448a4506aa3033ae054cd82f

                                  SHA256

                                  3d165f3654227a537eb41d136bbeea5dbdbb88e7e0e322f3fb4ca9cb90b75cad

                                  SHA512

                                  f23ea262c839c2820b07a3d05a616133b54744a7f31fe49796193ddf3200a1220b728fcc5c49b16adc655057efbe8db48f27399d9da639ada3741765616261c8

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                  Filesize

                                  120B

                                  MD5

                                  ebacd21e48d5d00b3161b8e9772cfbc9

                                  SHA1

                                  906fb98e27d8157a803bb51867fd694271ee4905

                                  SHA256

                                  f2b148a9120c50481dc48c3cd5b54319b0c55fe0a8143feb3b3108922865d5c5

                                  SHA512

                                  6651455611038dc93a2da00976fe42fb539d205c4a3ef604e4d4d48cbf1e678cc718fcb7b71e9ea1c8f7bef1d0abdbd6ebc747249cb76247a129d843af4f9daf

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
                                  Filesize

                                  264KB

                                  MD5

                                  f50f89a0a91564d0b8a211f8921aa7de

                                  SHA1

                                  112403a17dd69d5b9018b8cede023cb3b54eab7d

                                  SHA256

                                  b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                  SHA512

                                  bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                  Filesize

                                  701B

                                  MD5

                                  ae3137ff65ae1a4a8c20da220a9b3fdc

                                  SHA1

                                  3c9aeb5024a16d1c615f995a26fd39aa2e3fad8b

                                  SHA256

                                  3e580004e9a04cc301d565aa9a100d73492992406dec7cb151a85795c96cf2c1

                                  SHA512

                                  ecaca1061d955a7359edd2119662c43379c12737473d8d02b3d2b0185bd0de26cc594b9c04d0b943ece8215d0b8cdcd118b6803775cef88a91be8735057ff047

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                  Filesize

                                  5KB

                                  MD5

                                  81ddf19f30abb42ff47fc55c5dfa49bb

                                  SHA1

                                  48eeadf72571d79d6153e51a59f380bf4328927a

                                  SHA256

                                  196307177073627ee08549dd9ba5784674863434f009351a209a9bd0569cbaf5

                                  SHA512

                                  5e27b56ba4cd5965e501e6d8c36e6814d0ce5889934bf1fba1c13441f26a741ba5f98d63e69f92753c8e1c71d1a8b6dd1607b73fea6e9d45edb1298e43d8916d

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                  Filesize

                                  5KB

                                  MD5

                                  a646e55b22d3da4441db46c90e85861c

                                  SHA1

                                  e867bd45daf19eaecda37a7f4ac27d38376e7c11

                                  SHA256

                                  9cb9682ea69ea5366fea15c838c04467bc25cabf31ea5b04543c88efb5b2551a

                                  SHA512

                                  014e51a1ab55b32c1ebaa394826f2b3ad5b0eb9fbdbd481b728058d253adfa4f77c78acbb4c872dff7abcd715d1a3138f0ba11083077ee34f04779e0feb14a2e

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                  Filesize

                                  5KB

                                  MD5

                                  9a3b88cc41c58f37423b728515868cea

                                  SHA1

                                  d50be8f8d685232ed25b06caaa5bd6a8a68d3c4e

                                  SHA256

                                  b3ecc4d88e391a76afc773ea1ebb648f8e914fc561514dd0c2ebf3341499079f

                                  SHA512

                                  3ba29d664dfd47506cbb6af0f6560e66c7734b04193f90571b2fd533480037cfa159dab3ce07ba086aec11aa4cfc948198d28ed8bcb13d5dba64514817e3f86c

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                  Filesize

                                  5KB

                                  MD5

                                  172c5a14b7440fdb381a1e4d72db77fe

                                  SHA1

                                  c2a37fa7b6a9e80c4d36350d74bcaed284651d61

                                  SHA256

                                  4ebe82698c29cda5dbacd1892635253f898c6c2354789d32ea3ae9ea71c469f7

                                  SHA512

                                  f58e07e8118f1dd1934ae03c719e5dff1b03379dfd6d72c8c4bc18be2ac88cc76871d6b0c1f5e15e9ec3d3324ca26766294064b87d88e27029c6753a4d84f559

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                  Filesize

                                  5KB

                                  MD5

                                  4702ad45d4e96736a5d7bc25838ad5c5

                                  SHA1

                                  6600eef231c2196e16402290c504a85a62fc2bfe

                                  SHA256

                                  9167f932f7694968687a88da43ef158dcb3d338444ea5ea21587353c372913a0

                                  SHA512

                                  ab61ee8f36f0e1b847053c7a55557318c25d5534cecd450fe5f95d024b2d8a8249bdab1f1e051af29d0898d46b6e33fc456b17d3deb7bc01ebd3775b679823c6

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp
                                  Filesize

                                  16B

                                  MD5

                                  18e723571b00fb1694a3bad6c78e4054

                                  SHA1

                                  afcc0ef32d46fe59e0483f9a3c891d3034d12f32

                                  SHA256

                                  8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

                                  SHA512

                                  43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\a352b22f-26f8-483f-ba4a-56e42713d928.tmp
                                  Filesize

                                  7KB

                                  MD5

                                  f87ab98f4185b5d5b1aeba5d25cbfd83

                                  SHA1

                                  771fdf9b6b60bcb45f0642166782131bb4d7be95

                                  SHA256

                                  eb8f96cb43203ddf4c29cc8f032b58ea4d3e8d5410172a139469029df883462a

                                  SHA512

                                  66a80a4967b096a1d7b96908905bd00c6d258e4701c1fcd899583fb119ed83e5ed492ffc2b2769c65e87e312a348202fd7b2d4cb74bbf3000a7c1944e5abb245

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Temp\Cab4368.tmp
                                  Filesize

                                  61KB

                                  MD5

                                  f3441b8572aae8801c04f3060b550443

                                  SHA1

                                  4ef0a35436125d6821831ef36c28ffaf196cda15

                                  SHA256

                                  6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

                                  SHA512

                                  5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

                                  Download Submit

                                • C:\Users\Admin\AppData\Local\Temp\Tar43F8.tmp
                                  Filesize

                                  163KB

                                  MD5

                                  9441737383d21192400eca82fda910ec

                                  SHA1

                                  725e0d606a4fc9ba44aa8ffde65bed15e65367e4

                                  SHA256

                                  bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

                                  SHA512

                                  7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf

                                  Download Submit