Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240426-en
  • resource tags

    arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    29-05-2024 09:24

General

  • Target

    http://inspirisedigital.com

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://inspirisedigital.com
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3124
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffe140eab58,0x7ffe140eab68,0x7ffe140eab78
      2⤵
        PID:2404
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1744 --field-trial-handle=1800,i,11092283022634353482,2370863633918205602,131072 /prefetch:2
        2⤵
          PID:4836
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1800,i,11092283022634353482,2370863633918205602,131072 /prefetch:8
          2⤵
            PID:564
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2140 --field-trial-handle=1800,i,11092283022634353482,2370863633918205602,131072 /prefetch:8
            2⤵
              PID:3816
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2936 --field-trial-handle=1800,i,11092283022634353482,2370863633918205602,131072 /prefetch:1
              2⤵
                PID:3460
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2940 --field-trial-handle=1800,i,11092283022634353482,2370863633918205602,131072 /prefetch:1
                2⤵
                  PID:4832
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4160 --field-trial-handle=1800,i,11092283022634353482,2370863633918205602,131072 /prefetch:1
                  2⤵
                    PID:5064
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4372 --field-trial-handle=1800,i,11092283022634353482,2370863633918205602,131072 /prefetch:8
                    2⤵
                      PID:752
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4520 --field-trial-handle=1800,i,11092283022634353482,2370863633918205602,131072 /prefetch:8
                      2⤵
                        PID:3744
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4380 --field-trial-handle=1800,i,11092283022634353482,2370863633918205602,131072 /prefetch:2
                        2⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:1460
                    • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
                      "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
                      1⤵
                        PID:4860

                      Network

                      MITRE ATT&CK Enterprise v15

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                        Filesize

                        600B

                        MD5

                        c8d0231d4be0113652df2b9d05cccb06

                        SHA1

                        1ca7b5a1a5837f025b5a4d889c0f55212ba9152d

                        SHA256

                        a3049b95f583da24a8cc988bfa34c1dbce48862516e138993300db60a9df22fb

                        SHA512

                        4ab01765b2f030fba9728245d107155c4715d5d24009991305361c3313ebf89723321c9640f66f306dd475cdecc7f388f94e47ce69b64333e7b28fd90506f9d9

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                        Filesize

                        624B

                        MD5

                        aee81d4ca74f26ca1f1d1793fb084586

                        SHA1

                        7e7c56053339cc7b9e83a4ad1b886be7a0ea6547

                        SHA256

                        8d053a9a1d0f22a52abefa78570f940cc203d5e4a8ff7a5be45dcb6f3a204afe

                        SHA512

                        e85ec20383455c5956648878bb2d78aae1edc5882db28bf267ced6a79e5c16802740ecaa53e21428d2b16424b9587f6d53fe8a631373ef31c853dd532509d746

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                        Filesize

                        1KB

                        MD5

                        2d399db9d199e35112c41c8d18f0aa11

                        SHA1

                        eb5a405c0106ff70241788105660515ca1b426e3

                        SHA256

                        04ce127be3b16044c7fe95f1e5df7de25d901d97714936e94247cd351e3f38f4

                        SHA512

                        de062056f1c8c0fea6c46e26ac5d498117c7ed9f70ce82bef617b390f0f46c88d3fb949d4976e6c6b2154074f8e3ce08aaea900881e63686d88272c2ca617269

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                        Filesize

                        2B

                        MD5

                        d751713988987e9331980363e24189ce

                        SHA1

                        97d170e1550eee4afc0af065b78cda302a97674c

                        SHA256

                        4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                        SHA512

                        b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                        Filesize

                        1015B

                        MD5

                        20b794be77168b7c12d1d050e1b7f656

                        SHA1

                        a913bb84575691eb3ab8c3df74ab8757f50bdb94

                        SHA256

                        e6a7cde27e656e6bc88fdf2dff5b8982e37bb7f1ec90884e663f6850169860cb

                        SHA512

                        7c3a3f3ed143311f3654a812c1dd651abe1c197b06be15174412702eb2ad0aeb36dd7d3cb91be23626d226658cc4222a5f001b0a30ac71e7f0c1912ae3a03b6c

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        7KB

                        MD5

                        be9150af7f7cd5fb8a96ca0ea88b82f8

                        SHA1

                        435baa760a677536b7218e38807c0f78572eb82f

                        SHA256

                        95079436c67b603c9e6840fedef5b687774fbf6db24e04f978bfbf2b6cf392ef

                        SHA512

                        ab72875655449d57f49ff42d5648062ddd2e68cd608ebc4c20dffc357a0d4df53c14ae4ec7ad868b4c90df70ebf9f89355d25670141714e5c7567041fa8a222c

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5ee6f22a6357b7cb98f20763f73796d48050eb4a\4b495447-455c-400c-81ce-a4b4121e463d\index-dir\the-real-index

                        Filesize

                        96B

                        MD5

                        cae9d844d30dfef886207f068c779c6f

                        SHA1

                        50080cf7bc21bf2c60a3725f9315f69cc2294d41

                        SHA256

                        da7e231b6b953df499173a1ae14333b6c2605c2d21ba97c6f43e519cb66523be

                        SHA512

                        23c24934d3835b9aef9f6221f842870eae285298b361a402f766540240ea0322c1ce8cc6d528a4780257558290545a46699e36225cd854add6ac8d13a175295e

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5ee6f22a6357b7cb98f20763f73796d48050eb4a\4b495447-455c-400c-81ce-a4b4121e463d\index-dir\the-real-index~RFe58e0b6.TMP

                        Filesize

                        48B

                        MD5

                        d95736c72ebed41307cb49399703f4ff

                        SHA1

                        fec2a559f54221f63fee964cf3bba1b2dd230f8b

                        SHA256

                        0df08142731d4c6c28972fb72f4b5dd9bfbb70ba6f47630f1faeb39a0a3e0896

                        SHA512

                        8966e34f203a863d02f6862223ac67fbbfb78245f82ff0956c6c60027eb7a6cf96f7aa3f542a09c5c3fb2ba144a97578d01d5aca476da6ca8f01999b6d786cf8

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5ee6f22a6357b7cb98f20763f73796d48050eb4a\883f24f0-30b4-497b-b3eb-8b3341185501\index-dir\the-real-index

                        Filesize

                        96B

                        MD5

                        1927c023a1d435fe37edc711dfdcb4ee

                        SHA1

                        472a77c000f5380ef1157ce681768f8c6dc39e03

                        SHA256

                        29100621aefecdd1ce5e132dab196392279a936cf2f2c29a180a6d86690562c4

                        SHA512

                        ac43b759d944156a054e10b3537d7905da5dd573bd1de3dbf8ccfb4b7c9a219cdb3144ab34f3593d6e8032d696f6bd993f70fd4d2db4d294b4f6b1b04642febf

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5ee6f22a6357b7cb98f20763f73796d48050eb4a\883f24f0-30b4-497b-b3eb-8b3341185501\index-dir\the-real-index~RFe57ae51.TMP

                        Filesize

                        48B

                        MD5

                        590fe70f4cb082d66b385c51c52f7430

                        SHA1

                        91f1cc7f5c12189a367382279c438c7e2cc40167

                        SHA256

                        42ed0714d4eab5a85365898dadf61002549a75f639e76e2c86ed36f797a1e71f

                        SHA512

                        f6f912a34a01d3535e2404706a53bf3937df2f099d92cfd4c985e11342d258a73918b0c20985574a0f217fbd105bc3b7c438ba757fb07957d5366c52b4963731

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5ee6f22a6357b7cb98f20763f73796d48050eb4a\c1630d24-f9b5-4ea3-99a6-30df931c212b\index-dir\the-real-index

                        Filesize

                        72B

                        MD5

                        7b5c4833aa9425606ed0f0e3636f16ec

                        SHA1

                        e84f64be6eaecf63753392fa931d627158de89d3

                        SHA256

                        963ebd331d1409e8c6ffe41b0c32b965d0a6916c1eb2cba2e59663f45fccc469

                        SHA512

                        4b3ff3ef20e4fba7c83d0eeeb4830a3f4ef74c106a37f32d6a7cec535926a9cb2f60f93c6e581e29824c72793a35223345b4f01cda0c0ebfae24c920c1409ee8

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5ee6f22a6357b7cb98f20763f73796d48050eb4a\c1630d24-f9b5-4ea3-99a6-30df931c212b\index-dir\the-real-index~RFe57ada5.TMP

                        Filesize

                        48B

                        MD5

                        9bd7ba8b3468da427ce158daaaba0148

                        SHA1

                        87ac14737f9ad7b5b986b7d3ec8ce3ed05f65ea9

                        SHA256

                        4c500c2ab44691ca3ff333be53f60abef17312277cda18698e2267d7fe1ed2e5

                        SHA512

                        296b29ba5036295501fec60e680b9c1fd30d4f100fb218c8b69df92c5a0b35d07b2fd1ad82c68485f119e6085a6a9eb1534e0e3896998ebb62b3cae8dfd34c0c

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5ee6f22a6357b7cb98f20763f73796d48050eb4a\index.txt

                        Filesize

                        232B

                        MD5

                        36175722f573fec1dd50fe63cdbb9bd4

                        SHA1

                        86c32afe7b32947d00994b02408bbc7131633767

                        SHA256

                        f9e4485af8382875c44757f7651f520c1afed6154667ea179fa502a8ae2161d3

                        SHA512

                        aa139c63bfb4e7dae788073c4e32b408f30f1c868073b19a11bfd66f033437ee7b95029a9aaa5761ddd53d99a31c41b731f37781ede82b3ecb82230f77ce0cb7

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5ee6f22a6357b7cb98f20763f73796d48050eb4a\index.txt

                        Filesize

                        227B

                        MD5

                        50603467d53376754eae474980f9d416

                        SHA1

                        66ac9090c3ae98708951eb2f6d4b13b7d99c35de

                        SHA256

                        40e3e5b37b150ed84e0e45b1330abf532d1c7ee3e360a493865335a12607b5c5

                        SHA512

                        14bd1bfe9967f87e5ba5570c2a3020bbebc8875bf4fbac01697a26eda12ffac2f984f6f8159d49f6e52a725a69969c5878cd619f3c5e45ead2ff08ad3f315e38

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5ee6f22a6357b7cb98f20763f73796d48050eb4a\index.txt

                        Filesize

                        292B

                        MD5

                        316c4ecf46eb791570a8b6ccdba5cee2

                        SHA1

                        c41f7bcb5c226904e293b63f694ecd6f26205f0b

                        SHA256

                        25f02fda56036e458750566b0cf091b2d09ed3801b9d47bd086cd4285499b73b

                        SHA512

                        78788730e8c26665534af4259e303ffca4f42938f14bdb1a86ee8d51be0126b34499467c30c54086f68d5a00088691325361bdbdcbd1341c03d0a6b64561a798

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5ee6f22a6357b7cb98f20763f73796d48050eb4a\index.txt

                        Filesize

                        298B

                        MD5

                        64703b6dd10ee3124ad19c507a9c1a50

                        SHA1

                        7d295bdc3cf318351e9aebd2e1b30c267d84b095

                        SHA256

                        7829bba935f4fdc849e1d4d8a6be88dd7e4decae49adb9db0086740c8f6ee9d2

                        SHA512

                        de78e65d34abaab20afe27faa2c14ac94111a784367c300f3e52b724b3fb58550cefd33977412b3f8ce5056df3e6de056494b576e41ff7e6d746de583fb1e882

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\5ee6f22a6357b7cb98f20763f73796d48050eb4a\index.txt~RFe576021.TMP

                        Filesize

                        170B

                        MD5

                        47f05f93f7f2bce95cf294bcebb6db0d

                        SHA1

                        89130fd1131e6290d744c0070f54da36f8a2db4c

                        SHA256

                        dcb9c1438e80cbb6d550a7ef689de3234062bee134b9a03671e772c956e13cda

                        SHA512

                        e2f24639cfc3880b047f95b1139055cf49122b35326e93dc422bf464c6e37195c17219d72ee82628a8a1c0510fcd7ef5f298d98349e1aae501042ce8f0276d45

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                        Filesize

                        96B

                        MD5

                        066b9d45e1ef87e038584aafff52085a

                        SHA1

                        f34a963bf7328b3881d73064016d287e7126b261

                        SHA256

                        0e1c1dd8c727dcbc80aa7b4e40ffd515680f7a5b2cb60f59c822c405495d768e

                        SHA512

                        7f5804db45994103e7a11f42e8e9ecd760cee09964448b3d53ab6768344a3af2b98d36dc15c70e3a27d17a3d65054df157c4244c650d7ba276bcdcede7cf0791

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                        Filesize

                        130KB

                        MD5

                        7afedf906ac919611446c078d428d6a3

                        SHA1

                        85dbc57a51fe01d1454d0dc115cda06ec48ff81f

                        SHA256

                        3e5d51201013f581e900be10a4d73148f1ab7379d1e1a8089a5ee6feedd3adfb

                        SHA512

                        a2caab89860a2bc8514dfbd84c276ac8c2028739330a828c42c11d2c2dbf05c35f93db04e3b2dd9354be988e4365be1abf682558a3422a74f8c03514e5dc3c4c