Analysis

  • max time kernel
    1789s
  • max time network
    1806s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-04-2024 11:25

General

  • Target

    artist-the-weeknd-474869 (1).html

  • Size

    153KB

  • MD5

    245dafdb1f248a2dd86f115e08c63f9b

  • SHA1

    2853fc97da8ea15bda96bb3de94f797b60c45f1a

  • SHA256

    ed76f67f840bc1f242c8e1b2dcb9b9921a322a53454865014b485ba04d8c9bf7

  • SHA512

    96486543b82d444845bb3c44dcd67637659b452d1e5649761df62bce45e7c4312de05c304926e8125222f5423966e86855f93699d02bcffa8113b4cc6973c588

  • SSDEEP

    1536:oAljg3KCm4lDJgG6/cfrMDjElFsN7pDGu9TRhj5HYcF:okhcMjeFqxLP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\artist-the-weeknd-474869 (1).html
    1⤵
      PID:3616
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=4004 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:1
      1⤵
        PID:1136
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=4864 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:1
        1⤵
          PID:4296
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=2144 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:8
          1⤵
            PID:3136
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5548 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:1
            1⤵
              PID:2376
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffca2e29758,0x7ffca2e29768,0x7ffca2e29778
              1⤵
                PID:4772
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1768 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:2
                1⤵
                  PID:3324
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:8
                  1⤵
                    PID:4612
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2164 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:8
                    1⤵
                      PID:4416
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --mojo-platform-channel-handle=3116 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:1
                      1⤵
                        PID:4900
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --mojo-platform-channel-handle=3128 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:1
                        1⤵
                          PID:4284
                        • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                          1⤵
                            PID:3148
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --mojo-platform-channel-handle=4700 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:1
                            1⤵
                              PID:3032
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1756 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:8
                              1⤵
                                PID:3828
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4920 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:8
                                1⤵
                                  PID:1416
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4812 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:8
                                  1⤵
                                    PID:3904
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5396 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:8
                                    1⤵
                                      PID:5240
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5556 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:8
                                      1⤵
                                        PID:5536
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --mojo-platform-channel-handle=5116 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:1
                                        1⤵
                                          PID:5548
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --mojo-platform-channel-handle=3672 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:1
                                          1⤵
                                            PID:5636
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=14 --mojo-platform-channel-handle=5780 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:1
                                            1⤵
                                              PID:5832
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=1376 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:8
                                              1⤵
                                                PID:5980
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --mojo-platform-channel-handle=3228 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:1
                                                1⤵
                                                  PID:6044
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --mojo-platform-channel-handle=3184 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:1
                                                  1⤵
                                                    PID:6052
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=6264 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:1
                                                    1⤵
                                                      PID:5408
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=6164 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:1
                                                      1⤵
                                                        PID:5904
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --mojo-platform-channel-handle=6412 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:1
                                                        1⤵
                                                          PID:4880
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=3196 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:1
                                                          1⤵
                                                            PID:1608
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=212 --field-trial-handle=1888,i,15836565980031830724,11409359521447587562,131072 /prefetch:2
                                                            1⤵
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            PID:6092
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=6012 --field-trial-handle=2656,i,16940681401824032220,151921362336696246,262144 --variations-seed-version /prefetch:8
                                                            1⤵
                                                              PID:5432

                                                            Network

                                                            MITRE ATT&CK Matrix

                                                            Replay Monitor

                                                            Loading Replay Monitor...

                                                            Downloads

                                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012

                                                              Filesize

                                                              65KB

                                                              MD5

                                                              68b24c33a1084c384158245ee07e703f

                                                              SHA1

                                                              1f40cdfc988534806606faf81344ba79a1528ed9

                                                              SHA256

                                                              f95947735f1ba1e43b46a1ddc7229b71d37aee7821495f87f1f2d25563d47fcc

                                                              SHA512

                                                              1af1c596736b46a538a06285196d05054c062f29335080d136d325dc305d2d65d266517386d8d54a37de94036c878d9ababa76d9a5f5e8d8d07236d5ac0bb9ed

                                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

                                                              Filesize

                                                              19KB

                                                              MD5

                                                              9d43bb045f7444664c73333b4fc58220

                                                              SHA1

                                                              bdcf0fc36256f6893fc367dac9e4e439a78cd370

                                                              SHA256

                                                              f9034ce9158cc96e9733081513717b58b14f843d82bc6b06e89e8e421f68f7da

                                                              SHA512

                                                              fd886e47eb0ba8401db2f8a8fca40a3d046922e6825f200f6cbebed7f8a79d09f8f8f65cbb9a3e8d2eb7e36470bac0f8c185898084cecdde59b4997ac1ac41af

                                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                              Filesize

                                                              4KB

                                                              MD5

                                                              adccc00ec1193be82a05d732e187c518

                                                              SHA1

                                                              b2039d47df1638d88620ecbddd9be13a24050e3b

                                                              SHA256

                                                              5d6dfb9d9ed1241a7a89f9bc4797b8a35c6e138af770c49befcd6a86617b3bdb

                                                              SHA512

                                                              cf7776dadc65e39ad5f1c7d0e8f15b8450b56cb64ab6821368636421b072909d8bf9a3ae1626b5848a02c71acc4f65baca815f55365759c7e1c516ee9f13a91f

                                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                                              Filesize

                                                              6KB

                                                              MD5

                                                              810ef888e593d31b5b95ec1c36c0ffa6

                                                              SHA1

                                                              61f39e25915f43a2be5602ff972928a8363e4cbb

                                                              SHA256

                                                              b24e4f741270ad7527ceafc7ed3adb1589544b891ffa9860d168598082ccc2ba

                                                              SHA512

                                                              be6fc78ceab3ea86de5bba7bd29fdacb71cf61daced70d514febfcc692e781d6cd9d0d46be28f0cb73fa692d7b3f04ea54c95bb6d066369edeed7cb947ddfb64

                                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                              Filesize

                                                              1KB

                                                              MD5

                                                              f3bdb785d3afb8154fa0b70605595bb3

                                                              SHA1

                                                              20ec915d29150adccdfaedb038bbd94f15ed379b

                                                              SHA256

                                                              6e1165ca77e39030781de38850b3c71e2ddb2362aab68ea764b90616a2322ab6

                                                              SHA512

                                                              cceabdbcb360e416afe70bf9e0e7df5ec6522fc895fcffda1a9f81b201df3629f45643f64ac4d0a9a7f713cb7907337632201707e8c72eb6f891789eab2bee30

                                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                              Filesize

                                                              369B

                                                              MD5

                                                              fd43f81d2de187555a8bf4b19617c9a5

                                                              SHA1

                                                              00956f782e66b12777a01c3a9f729750de349bde

                                                              SHA256

                                                              25611c6fedc5e1bb2dcdfba2dec1450bb3785ef6781a53b16f97a000d4a13189

                                                              SHA512

                                                              70fe6bbfdd4f7f680b94579e182852253e167004cba5e0d44ae33407c5361f40bad58db822b16530edaea6fe54c88849e2f806eeb0742a17a2d3fd8245f5be56

                                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                              Filesize

                                                              1KB

                                                              MD5

                                                              965566f30f02cb83d32d1eb62a778f5c

                                                              SHA1

                                                              1032463f0193174e3020eaff3efca4cfeeadc65f

                                                              SHA256

                                                              236da5b6d6f0c807e7e222773a956d0ccc913459b4e096fdd57a5c5f1a1ae173

                                                              SHA512

                                                              a306d6ed37915c1f9e13713b84599e3888e6163c32114a85ebcf263c5e296d3c94a8efce20b5077fd8be1485d5156c4f197e29d4096d135a378c46b1294e5069

                                                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                              Filesize

                                                              1KB

                                                              MD5

                                                              84c708033eda6aa8d6de46eacc2c23b3

                                                              SHA1

                                                              3bb27cb4d22a3aaeb72d986a20e0234202107c94

                                                              SHA256

                                                              c0ebdb8b15f6ef4669c072d4bc2981489d66ef2eeb94c9e18b1cb44a4aceabd6

                                                              SHA512

                                                              056852c671e77d38d4f4885df1cd8c2a87043682d262270a080ebea5278a0103499203139c9baf4a99613c82e542fdee3367dcac169b276af08eabd89d2b37a3