Resubmissions

24/02/2024, 16:45

240224-t9jsjsgg37 5

Analysis

  • max time kernel
    212s
  • max time network
    495s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/02/2024, 16:45

General

  • Target

    LCode.exe

  • Size

    4.5MB

  • MD5

    47dd3179a5aea88abb617473512dd733

  • SHA1

    39e2b76ca101409d084aa0f5bd1269609cd0d5b1

  • SHA256

    4dbeaaba3446e04e5febc03b727c79f5d3e147b285aefbebda15f9650536a95e

  • SHA512

    e251497798e9ee5039162c70521c0cdf238fe65202387f44d4db3b4b3a09600095348932073895267fedeccc9dc7106eb1497b9c9f7537a96c20880f133b95e3

  • SSDEEP

    98304:tC+r4RmLRxvDyRq/sR80T/oX5EmE2xuIeGGs:tC+rKmLHveRqwT/oX5EmjxuI8s

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\LCode.exe
    "C:\Users\Admin\AppData\Local\Temp\LCode.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    PID:4360
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=11 --mojo-platform-channel-handle=1924 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
    1⤵
      PID:4072
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4496 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:8
      1⤵
        PID:2296
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --mojo-platform-channel-handle=3128 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
        1⤵
          PID:3332
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=14 --mojo-platform-channel-handle=5468 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
          1⤵
            PID:3636
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --mojo-platform-channel-handle=5496 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
            1⤵
              PID:4804
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --mojo-platform-channel-handle=5504 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
              1⤵
                PID:2476
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=5528 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                1⤵
                  PID:2484
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=5520 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                  1⤵
                    PID:1268
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --mojo-platform-channel-handle=6080 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                    1⤵
                      PID:3780
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=6292 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                      1⤵
                        PID:2844
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --mojo-platform-channel-handle=6536 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                        1⤵
                          PID:3444
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --mojo-platform-channel-handle=6588 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                          1⤵
                            PID:2396
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=23 --mojo-platform-channel-handle=6816 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                            1⤵
                              PID:4208
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=24 --mojo-platform-channel-handle=6820 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                              1⤵
                                PID:3412
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=25 --mojo-platform-channel-handle=7116 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                1⤵
                                  PID:4992
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=26 --mojo-platform-channel-handle=7104 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                  1⤵
                                    PID:3032
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=27 --mojo-platform-channel-handle=7412 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                    1⤵
                                      PID:1980
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=28 --mojo-platform-channel-handle=7612 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                      1⤵
                                        PID:5160
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=29 --mojo-platform-channel-handle=7632 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                        1⤵
                                          PID:5168
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=30 --mojo-platform-channel-handle=7556 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                          1⤵
                                            PID:5292
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=31 --mojo-platform-channel-handle=8092 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                            1⤵
                                              PID:5340
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=8248 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:2
                                              1⤵
                                              • Suspicious behavior: EnumeratesProcesses
                                              PID:5512
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=33 --mojo-platform-channel-handle=8756 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                              1⤵
                                                PID:5656
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=34 --mojo-platform-channel-handle=8752 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                1⤵
                                                  PID:5672
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=35 --mojo-platform-channel-handle=7904 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                  1⤵
                                                    PID:6012
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8840 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:8
                                                    1⤵
                                                      PID:6028
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=37 --mojo-platform-channel-handle=7988 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                      1⤵
                                                        PID:5592
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=38 --mojo-platform-channel-handle=6692 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                        1⤵
                                                          PID:5636
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=39 --mojo-platform-channel-handle=3248 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                          1⤵
                                                            PID:2604
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=40 --mojo-platform-channel-handle=8752 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                            1⤵
                                                              PID:1052
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=44 --mojo-platform-channel-handle=5060 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                              1⤵
                                                                PID:5284
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=43 --mojo-platform-channel-handle=4328 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                                1⤵
                                                                  PID:5204
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=42 --mojo-platform-channel-handle=8764 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                                  1⤵
                                                                    PID:5260
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=41 --mojo-platform-channel-handle=6092 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                                    1⤵
                                                                      PID:5228
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=45 --mojo-platform-channel-handle=8600 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                                      1⤵
                                                                        PID:5796
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=46 --mojo-platform-channel-handle=7424 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                                        1⤵
                                                                          PID:4392
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=47 --mojo-platform-channel-handle=3316 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                                          1⤵
                                                                            PID:1800
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=48 --mojo-platform-channel-handle=8520 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                                            1⤵
                                                                              PID:5300
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=49 --mojo-platform-channel-handle=8312 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                                              1⤵
                                                                                PID:5172
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=50 --mojo-platform-channel-handle=5760 --field-trial-handle=1872,i,6659446791994917774,11946262630860659126,131072 /prefetch:1
                                                                                1⤵
                                                                                  PID:5504

                                                                                Network

                                                                                MITRE ATT&CK Matrix

                                                                                Replay Monitor

                                                                                Loading Replay Monitor...

                                                                                Downloads

                                                                                • C:\Users\Admin\AppData\Local\Temp\LCode.ini

                                                                                  Filesize

                                                                                  144B

                                                                                  MD5

                                                                                  04790fa9d3fbd40274cb169de4f43fe0

                                                                                  SHA1

                                                                                  4aa7f9ccd39142034c6073e88111fd596fdf812a

                                                                                  SHA256

                                                                                  dfdb0ac9716a23b49c9e90ecb5077fbd805458ddcd27aa0dc95aeb04b7a7b191

                                                                                  SHA512

                                                                                  00b7d9d86cf2234002a2edabe85baf31f11b46267dd82f96dcb9ff3cba0d503c0820318ed6990d52ff1c2b8eccb26e933afba7b315269cb7f4f7ae1aa4a3dd93