Overview

overview

1

Static

static

1

URLScan

urlscan

1

https://aersdferab79...

windows7-x64

1

https://aersdferab79...

windows10-2004-x64

1

Analysis

  • max time kernel
    0s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 07:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    https://aersdferab7984sdf0e0re.page.link/H3Ed

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcbfad46f8,0x7ffcbfad4708,0x7ffcbfad4718
    1⤵
      PID:2708
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://aersdferab7984sdf0e0re.page.link/H3Ed
      1⤵
      • Suspicious use of WriteProcessMemory
      PID:1840
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2852 /prefetch:8
        2⤵
          PID:4660
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 /prefetch:3
          2⤵
            PID:440
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3536 /prefetch:1
            2⤵
              PID:5084
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3428 /prefetch:1
              2⤵
                PID:4656
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
                2⤵
                  PID:5100
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5140 /prefetch:8
                  2⤵
                    PID:4928
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5140 /prefetch:8
                    2⤵
                      PID:2604
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1
                      2⤵
                        PID:1792
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
                        2⤵
                          PID:3292
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4284 /prefetch:1
                          2⤵
                            PID:4624
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2120 /prefetch:1
                            2⤵
                              PID:4708
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5156 /prefetch:1
                              2⤵
                                PID:2604
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5168 /prefetch:1
                                2⤵
                                  PID:5440
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2536 /prefetch:8
                                  2⤵
                                    PID:6140
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,4453915637804716428,1276975525838801018,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1296 /prefetch:2
                                    2⤵
                                      PID:2972
                                  • C:\Windows\System32\CompPkgSrv.exe
                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                    1⤵
                                      PID:212
                                    • C:\Windows\System32\CompPkgSrv.exe
                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                      1⤵
                                        PID:3012
                                      • C:\Windows\system32\AUDIODG.EXE
                                        C:\Windows\system32\AUDIODG.EXE 0x3fc 0x388
                                        1⤵
                                          PID:4492

                                        Network

                                        MITRE ATT&CK Matrix

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          Filesize

                                          152B

                                          MD5

                                          4d6e17218d9a99976d1a14c6f6944c96

                                          SHA1

                                          9e54a19d6c61d99ac8759c5f07b2f0d5faab447f

                                          SHA256

                                          32e343d2794af8bc6f2f7c905b5df11d53db4ad8922b92ad5e7cc9c856509d93

                                          SHA512

                                          3fa166b3e2d1236298d8dda7071a6fcf2bde283f181b8b0a07c0bb8ba756d6f55fa8a847ca5286d4dbabc6dace67e842a118866320ac01bd5f93cccd3a032e47

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019
                                          Filesize

                                          1KB

                                          MD5

                                          a68c7af0c8d235e015170faf1d993f4f

                                          SHA1

                                          bcb9d27f1b8ec31509df69123cfba339de73fd55

                                          SHA256

                                          c3f0861af234a39077456a770baaa597f75463fa1f72ba41ee11bd9209459ad4

                                          SHA512

                                          65c95e312368296e1d52f25bf598a7ce779fc506ec96dc04116d08fc08234a87f8bd9a6ebb3ffeadc9ead3341bf92d3d33b03815b01f17672af776150feea127

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                          Filesize

                                          2KB

                                          MD5

                                          37544cbf22237ab02a952399457035d0

                                          SHA1

                                          250c0c0232f641f72830956a8e3127ca51d52f76

                                          SHA256

                                          451274a61dec64e6fe84b70ca001528b7ca38e1a8c425d704c72c62d026bda55

                                          SHA512

                                          da2fdccba4dc47cd3a9676f3daebefec58594a5a652d32ea70b111c68c448cee06178e172b8075c70b3ac2b6f3d5e085fc67a3a9f03ae28a13e5229baebb2234

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                          Filesize

                                          111B

                                          MD5

                                          807419ca9a4734feaf8d8563a003b048

                                          SHA1

                                          a723c7d60a65886ffa068711f1e900ccc85922a6

                                          SHA256

                                          aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

                                          SHA512

                                          f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                          Filesize

                                          1KB

                                          MD5

                                          900c2c8b902432b44cb9f741b66a3c51

                                          SHA1

                                          59ffbf0d7058e2f33375c6c6d1f9036f1e480e05

                                          SHA256

                                          fef7e5acf828c3de03cc764a834860ab11410c21b227d08bd1ee93405e02df0d

                                          SHA512

                                          d0203cf0a3fc25ad68a810bc509ffeb4e3cc50040c3562809c3235015cac7202cda3fe5f80610f4e765454d15f386821babfca5fd190cb4d98dee7207a7bd7f0

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                          Filesize

                                          111B

                                          MD5

                                          285252a2f6327d41eab203dc2f402c67

                                          SHA1

                                          acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                          SHA256

                                          5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                          SHA512

                                          11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                          Filesize

                                          1KB

                                          MD5

                                          8fa17cd342e991303c4b73f8eb437467

                                          SHA1

                                          53d001e37c7a9293b798b6a8eb654bf00e329d05

                                          SHA256

                                          077014c19070c0a272f945fd664f3fa1da8d08b69a15ff13f91cba0806c47be1

                                          SHA512

                                          45a1f3337f8586dffb5a1a1e43207338bf427beefcd2b1dd009aab5e521e05f2433f42b58ab4330973322c75013ee6bf4a19e6bffe613529f978e4d6b1ca6755

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                          Filesize

                                          263B

                                          MD5

                                          4f76dd7985a6837210c568b9088972ba

                                          SHA1

                                          89bb9977455ad5d156c676b79a5fe0579d9f0ed3

                                          SHA256

                                          d4c002bc0be9a9cc3308d0c0c110ceff7224b61b4330eb11d10343413a0e4e8d

                                          SHA512

                                          2fc9260464e17fa0e7c4b94966dbfae1c0f6b07973f778a37e02978de336ebc558a9abeaef060d1290d5ca10effe3dc8978bfdc641521655956bc1bb4be555d1

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                          Filesize

                                          5KB

                                          MD5

                                          8f7261ae95ae76d56400e20abba86032

                                          SHA1

                                          e87abe85e98a385d6b4714b6a251f24bb0e563a9

                                          SHA256

                                          3918644b96795ed1d7b3a74acc5e07ab83ed3e8a0fcf31f7f4c07ed8b58ff656

                                          SHA512

                                          c1a3a4dd771eecac4f33c2890a5e3b228a28aed7673dc3042024878c4e7291fcd437ae6659bfd3740bbee75c008b671e501fad6b16468e8422070e724146e934

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                          Filesize

                                          3KB

                                          MD5

                                          5b36718f17f4e7d6b785334e516bea01

                                          SHA1

                                          5ea62675209a48f7418b261cc6c07f4a962d56b4

                                          SHA256

                                          3f8dbb1c118216486b40d5cdb98efee8bf7e8c43fe547fe5d14031b4a26a08ca

                                          SHA512

                                          037c63327ea714e66dca379cdc469c22d6aa5bd1aafde04b90b8f098b1679fcc7955ca958182664abcd46dc5e9d492b789be8eb2aac625fbf8fbe1dbe9b9d467

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                          Filesize

                                          1KB

                                          MD5

                                          0cdd4073548b9a4e4eedda9157f5aa31

                                          SHA1

                                          4d7689aa73a0b567d0d7b7e4e42b1b14225d6dfa

                                          SHA256

                                          8c2275a6edfb13e7447a7c5e17c38c6c3c8df0d57a80de37db64306a3da2fc56

                                          SHA512

                                          6bc4c0154d408a5bb2b684776024be8e82c346ee6063138b85d2a5776b2a3c5037575bc2ffa03ac93b69a3b71566cb9f869166780bd389571c2e5b0059c3c387

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                          Filesize

                                          16B

                                          MD5

                                          6752a1d65b201c13b62ea44016eb221f

                                          SHA1

                                          58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                          SHA256

                                          0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                          SHA512

                                          9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                          Filesize

                                          11KB

                                          MD5

                                          8a68a5f6ca6abcf479e8a67dd0868ffa

                                          SHA1

                                          a787c9014769a9536f5c4d2c608c8e2dd9785515

                                          SHA256

                                          cf5346226952706698c13803a1a4bf785a02bc26861b61e0d8ac5406155f11a6

                                          SHA512

                                          cbe4a64843843e18adf0e97b0724282c06c6d07a261e6b25b7dc0ddfecacb5a08a133717f0402262f1ce8bc92aaed7a3587b8c3ba73fcda54dd08e4c11183469

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                          Filesize

                                          12KB

                                          MD5

                                          4b2c7f1a320f8f5490be70a92d4f6b01

                                          SHA1

                                          481fd99baf87704f90e34c04214e91657f279719

                                          SHA256

                                          15cfe9ea4435527f9b332deb5328060c7c300c52b9224ec7e0eb0534a3b7c392

                                          SHA512

                                          1d9ea119f887f6c7faeb1a7e6a97d46bb68417cb8fac089ec64af821ddbd25612b8675316d8ced19b964bc005e0c940bfa00f92119cd8e9cc05c92bcf8fdfb61

                                          Download Submit