Analysis
-
max time kernel
1789s -
max time network
1800s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
27-05-2024 07:55
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://vpnkit.tech/vpn/free-n-easy/?cep=bMT3fg58gpeDfnBiS6dlJpgCykFDOAo4HalTatfrdNaroWh0gVlA5DWqMEOlspBF6mnJSIcfYevib7MKNYZQZd5KzkLFK-agYfxfhaJV_nxc0SNEGWhh_jsIoyYmVP5ImVpDJ3DLD7NRgbnzxsqXhsJsFFenHBTqB1TJVU6T-BzINCxKpdSOO1Z40CDWFEJ9Xt3UfxNFAVnF6w1cxBTL4zsDdts8yr3YpnR0saU4-2Wei96l4-b4tlL6sqo2B4GNNJPL8WdCR5Wl2UNJGST1tKfvtvvBgsZK3lFgfGzK6WZf3zkW_JUmdLAuXgFKzP_mr1i0hFvOCjTmVlWEWhsOprJhHWX6KTIT9NoaTRlpcUa6arzVn47rVQ46HwtdOUUrRYH362eW3GCwfPEUWKZzOg6_ormMHj1A1W2Fxkvl5A-55tWcBNTz2uKHhHrtYgBBAA7_BI39NbjndFcObrwpz3wStMQPTPsoV9B_1wjRaTa4OZgyni38LeINWZJVX4WZhG1SSyXkF-5WJQ0rZturuBaBAIyF61BJhlML51_iOyUhec70ddzfWzBSdN1_EnxlZmQ0AmoE6_kDuxe6nCbPp5zK8FvAMgh41iOYBc57ZU01ldx8A5kZSfhDsnTusZFJUcUx5EqkDqG7rtGw1qD3iBlEpwHqwBjkKvpAQfaS4HrOqf_UWsbE4PCVgNnsEIXiiarfqQWcSywQ_IPuO1EDOA&lptoken=179116b5799f82ff6173&zoneid=3579156&bannerid=21081774&browser=firefox&os=windows&device=desktop®ion=kl&isp=alliance+digital+private+limited&useragent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+rv%3A125.0%29+Gecko%2F20100101+Firefox%2F125.0&language=en&connectiontype=broadband&cost=0.000240&visitor_id=818866274615697476
Resource
win10v2004-20240226-en
General
-
Target
https://vpnkit.tech/vpn/free-n-easy/?cep=bMT3fg58gpeDfnBiS6dlJpgCykFDOAo4HalTatfrdNaroWh0gVlA5DWqMEOlspBF6mnJSIcfYevib7MKNYZQZd5KzkLFK-agYfxfhaJV_nxc0SNEGWhh_jsIoyYmVP5ImVpDJ3DLD7NRgbnzxsqXhsJsFFenHBTqB1TJVU6T-BzINCxKpdSOO1Z40CDWFEJ9Xt3UfxNFAVnF6w1cxBTL4zsDdts8yr3YpnR0saU4-2Wei96l4-b4tlL6sqo2B4GNNJPL8WdCR5Wl2UNJGST1tKfvtvvBgsZK3lFgfGzK6WZf3zkW_JUmdLAuXgFKzP_mr1i0hFvOCjTmVlWEWhsOprJhHWX6KTIT9NoaTRlpcUa6arzVn47rVQ46HwtdOUUrRYH362eW3GCwfPEUWKZzOg6_ormMHj1A1W2Fxkvl5A-55tWcBNTz2uKHhHrtYgBBAA7_BI39NbjndFcObrwpz3wStMQPTPsoV9B_1wjRaTa4OZgyni38LeINWZJVX4WZhG1SSyXkF-5WJQ0rZturuBaBAIyF61BJhlML51_iOyUhec70ddzfWzBSdN1_EnxlZmQ0AmoE6_kDuxe6nCbPp5zK8FvAMgh41iOYBc57ZU01ldx8A5kZSfhDsnTusZFJUcUx5EqkDqG7rtGw1qD3iBlEpwHqwBjkKvpAQfaS4HrOqf_UWsbE4PCVgNnsEIXiiarfqQWcSywQ_IPuO1EDOA&lptoken=179116b5799f82ff6173&zoneid=3579156&bannerid=21081774&browser=firefox&os=windows&device=desktop®ion=kl&isp=alliance+digital+private+limited&useragent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+rv%3A125.0%29+Gecko%2F20100101+Firefox%2F125.0&language=en&connectiontype=broadband&cost=0.000240&visitor_id=818866274615697476
Malware Config
Signatures
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://vpnkit.tech/vpn/free-n-easy/?cep=bMT3fg58gpeDfnBiS6dlJpgCykFDOAo4HalTatfrdNaroWh0gVlA5DWqMEOlspBF6mnJSIcfYevib7MKNYZQZd5KzkLFK-agYfxfhaJV_nxc0SNEGWhh_jsIoyYmVP5ImVpDJ3DLD7NRgbnzxsqXhsJsFFenHBTqB1TJVU6T-BzINCxKpdSOO1Z40CDWFEJ9Xt3UfxNFAVnF6w1cxBTL4zsDdts8yr3YpnR0saU4-2Wei96l4-b4tlL6sqo2B4GNNJPL8WdCR5Wl2UNJGST1tKfvtvvBgsZK3lFgfGzK6WZf3zkW_JUmdLAuXgFKzP_mr1i0hFvOCjTmVlWEWhsOprJhHWX6KTIT9NoaTRlpcUa6arzVn47rVQ46HwtdOUUrRYH362eW3GCwfPEUWKZzOg6_ormMHj1A1W2Fxkvl5A-55tWcBNTz2uKHhHrtYgBBAA7_BI39NbjndFcObrwpz3wStMQPTPsoV9B_1wjRaTa4OZgyni38LeINWZJVX4WZhG1SSyXkF-5WJQ0rZturuBaBAIyF61BJhlML51_iOyUhec70ddzfWzBSdN1_EnxlZmQ0AmoE6_kDuxe6nCbPp5zK8FvAMgh41iOYBc57ZU01ldx8A5kZSfhDsnTusZFJUcUx5EqkDqG7rtGw1qD3iBlEpwHqwBjkKvpAQfaS4HrOqf_UWsbE4PCVgNnsEIXiiarfqQWcSywQ_IPuO1EDOA&lptoken=179116b5799f82ff6173&zoneid=3579156&bannerid=21081774&browser=firefox&os=windows&device=desktop®ion=kl&isp=alliance+digital+private+limited&useragent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+rv%3A125.0%29+Gecko%2F20100101+Firefox%2F125.0&language=en&connectiontype=broadband&cost=0.000240&visitor_id=8188662746156974761⤵PID:1444
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=3972 --field-trial-handle=2180,i,12780723798465539942,12010519452607841069,262144 --variations-seed-version /prefetch:11⤵PID:1932
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=5368 --field-trial-handle=2180,i,12780723798465539942,12010519452607841069,262144 --variations-seed-version /prefetch:11⤵PID:4600
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=5408 --field-trial-handle=2180,i,12780723798465539942,12010519452607841069,262144 --variations-seed-version /prefetch:81⤵PID:448
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --no-appcompat-clear --disable-gpu-compositing --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=5428 --field-trial-handle=2180,i,12780723798465539942,12010519452607841069,262144 --variations-seed-version /prefetch:11⤵PID:4492
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --mojo-platform-channel-handle=5520 --field-trial-handle=2180,i,12780723798465539942,12010519452607841069,262144 --variations-seed-version /prefetch:81⤵PID:3228
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --no-appcompat-clear --mojo-platform-channel-handle=5404 --field-trial-handle=2180,i,12780723798465539942,12010519452607841069,262144 --variations-seed-version /prefetch:81⤵PID:4448
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4872 --field-trial-handle=2180,i,12780723798465539942,12010519452607841069,262144 --variations-seed-version /prefetch:81⤵PID:4384