Overview

overview

1

Static

static

1

URLScan

urlscan

1

https://cloudflare-i...

windows10-1703-x64

1

Analysis

  • max time kernel
    0s
  • max time network
    142s
  • platform
    windows10-1703_x64
  • resource
    win10-20231020-en
  • resource tags

    arch:x64arch:x86image:win10-20231020-enlocale:en-usos:windows10-1703-x64system
  • submitted
    14-11-2023 08:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    https://cloudflare-ipfs.com/ipfs/QmPcCE3ZG1Es6NMA29Wpq94b1pJza5916cVNZg6nXEKck9?

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffff6989758,0x7ffff6989768,0x7ffff6989778
    1⤵
      PID:376
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cloudflare-ipfs.com/ipfs/QmPcCE3ZG1Es6NMA29Wpq94b1pJza5916cVNZg6nXEKck9?
      1⤵
      • Enumerates system info in registry
      • Suspicious use of WriteProcessMemory
      PID:4564
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2076 --field-trial-handle=1844,i,611209513372121507,10121015540173365138,131072 /prefetch:8
        2⤵
          PID:2228
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2992 --field-trial-handle=1844,i,611209513372121507,10121015540173365138,131072 /prefetch:1
          2⤵
            PID:2284
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2972 --field-trial-handle=1844,i,611209513372121507,10121015540173365138,131072 /prefetch:1
            2⤵
              PID:4628
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1764 --field-trial-handle=1844,i,611209513372121507,10121015540173365138,131072 /prefetch:8
              2⤵
                PID:2088
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1516 --field-trial-handle=1844,i,611209513372121507,10121015540173365138,131072 /prefetch:2
                2⤵
                  PID:4036
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4800 --field-trial-handle=1844,i,611209513372121507,10121015540173365138,131072 /prefetch:8
                  2⤵
                    PID:5004
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4912 --field-trial-handle=1844,i,611209513372121507,10121015540173365138,131072 /prefetch:8
                    2⤵
                      PID:1732
                  • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                    "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                    1⤵
                      PID:4420

                    Network

                    MITRE ATT&CK Enterprise v15

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\41222ee1-3c10-4d95-b7a7-8df291a57002.tmp
                      Filesize

                      5KB

                      MD5

                      074d05b092d00a1d271253561d88e3db

                      SHA1

                      5eae201b9a88c5499743ddc26cf9098ff560492f

                      SHA256

                      ff7e6aab9a3aa8902b67498c93123253b791f3260e081eeb519629720e4b2f2d

                      SHA512

                      3809d7af31cddd55437764a587214f153bbd5126b0b7956a8c3d8e8814fa397a7a2fb2560989524748839e36ef2457acc6ba8dd8c0e1c2732c8ba850038a1202

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                      Filesize

                      96B

                      MD5

                      24f53d7cd64808b4d82cd9dfe4fa5d36

                      SHA1

                      90b28bb719c49ae89639c0e22c1ee8f04f9872d4

                      SHA256

                      55f811f4acba5462d674d0cf4373ce5d73ab4299ed9df404b500124bd1eac45b

                      SHA512

                      44b20e42e6078d20d51578aaeb2c34f568a1955945ee9d90e4c7c30f9124424aa9972505fc26ddc49ebad2caa0364d22077210b5e9044cb2bccb17a6e5bb3b76

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                      Filesize

                      2KB

                      MD5

                      52fd2e383f0a91a1d9132254fdf132ef

                      SHA1

                      380caaebdc10a5bee302931f3d5728ce26bc5488

                      SHA256

                      ce0e2476d4f92456c8af28d8a24dd5093f337220ce6ae30e80bc503976b15027

                      SHA512

                      344d4aa388e905c1f29a4695cc2a6ed2b6461cfee30dcb8d61031926e9244cff9dd85accea85d9977861bcf14ea1ddeccd2dcf06ba11ca846a83967b8a3919d4

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                      Filesize

                      538B

                      MD5

                      44c143fb16c750d02ba72dff6fbdc959

                      SHA1

                      88c8c4c97de1d81d5167681b3016835ec47963df

                      SHA256

                      536fc71e37c9d2a55d19732785f829d253215628e1316ae1d518f371a57bf415

                      SHA512

                      6a139b7a3fe1177c527ce1013d324424aa838d2aa4981b8dbbd08046b743962feffd9f816f9757bbe17e75a79a8bb642cdfb3574cf1abf7856e824830af5404a

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                      Filesize

                      5KB

                      MD5

                      44891d41061609c61d0dd52d97922543

                      SHA1

                      68c247a4d75143a534db8944a8c3a2b825576a59

                      SHA256

                      f1891074a8d914cb87e85c0484ae73aef8fadb17a82fc22f0997c823e186acea

                      SHA512

                      a285054690f5fe168fd17df84391b6155af32347362fb7ae91dcff7bb869d63910d5dcdbab87f08e21506958c0641c017709671c323e29f37119b0cb0f736c39

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                      Filesize

                      6KB

                      MD5

                      0179ff2e9188d9efd17487d31fe1dc9f

                      SHA1

                      6a67426d1b43c6a6a36b3b941ef219b90b33b429

                      SHA256

                      f281bb28f4dba8bd2277cd41a6627bada748b60d9d20422857e3c2d3d4ed9eed

                      SHA512

                      df19084106d81d86fa7bc61981d895a622903ca9509c814737dea6671328b28cc9ebf5e61a5bf0f845111d1157b899d4ecb208094642ebf112867e470a60b26f

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                      Filesize

                      106KB

                      MD5

                      3a789137ef9dcdd061343033f7c87253

                      SHA1

                      5730ef0daad74fb3dc0ec838d343a6ad570f12e8

                      SHA256

                      3059118036b4761cecd30a5cae7c3502ecd90202f76cdb15a4e11b3393392466

                      SHA512

                      af851d2123b3457d09651d8349f6e727f41b119e677d39898a9a94cf01f7d9e7fb046bcba3af2a923438c602893a01ca2ad4c9a876a6b4e14a58d5b1d0e62a82

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json
                      Filesize

                      2B

                      MD5

                      99914b932bd37a50b983c5e7c90ae93b

                      SHA1

                      bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                      SHA256

                      44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                      SHA512

                      27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

                      Download Submit