Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-06-2024 09:27

General

  • Target

    https://support.manymore.fr/

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 5 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://support.manymore.fr/
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4832
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff95212ab58,0x7ff95212ab68,0x7ff95212ab78
      2⤵
        PID:4300
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1600 --field-trial-handle=1740,i,2250835878727120804,7301452895992545097,131072 /prefetch:2
        2⤵
          PID:4728
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1740,i,2250835878727120804,7301452895992545097,131072 /prefetch:8
          2⤵
            PID:4472
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2212 --field-trial-handle=1740,i,2250835878727120804,7301452895992545097,131072 /prefetch:8
            2⤵
              PID:4424
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3048 --field-trial-handle=1740,i,2250835878727120804,7301452895992545097,131072 /prefetch:1
              2⤵
                PID:4216
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3068 --field-trial-handle=1740,i,2250835878727120804,7301452895992545097,131072 /prefetch:1
                2⤵
                  PID:1832
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4196 --field-trial-handle=1740,i,2250835878727120804,7301452895992545097,131072 /prefetch:8
                  2⤵
                    PID:2996
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4636 --field-trial-handle=1740,i,2250835878727120804,7301452895992545097,131072 /prefetch:8
                    2⤵
                      PID:3208
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4848 --field-trial-handle=1740,i,2250835878727120804,7301452895992545097,131072 /prefetch:2
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:1884
                  • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
                    "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
                    1⤵
                      PID:3208

                    Network

                    MITRE ATT&CK Enterprise v15

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

                      Filesize

                      39KB

                      MD5

                      f38b3d6e4605a8390e3ecc21f22e7c04

                      SHA1

                      f35ce4e7c4de71cc0d0f5167e7a7b75e3a9f41b0

                      SHA256

                      d5332743146a985d5afbd5c089a60c5a7073d3968cef5b3fd51f294c5b7fd1a0

                      SHA512

                      8420f2ee882e1d2290d33caca544d9dd7ae21bb34dff24d96aaa825ad5f6d1b7bfb397ec1c3445fd14782ba113ca16b3f374d87db9450034a8502ea7541afc4d

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

                      Filesize

                      196KB

                      MD5

                      716a4f6df1aec400bbbabd30e2b11c47

                      SHA1

                      e9708aab59481e8a2ad981479f98cd732c8beede

                      SHA256

                      6253e0ffce49f14ee7351951e4a8e746d2c9fa038ecd5daf56f361dd956dbcb0

                      SHA512

                      d9ceb439c330de329e71bbacebd364e96c3ae0c818422f161b1f1ff8dd6f0695f6e60895991351b081801a4d4432646f7d56891cb7172a7bde18c4a1d92b9e39

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

                      Filesize

                      1.9MB

                      MD5

                      f48370d7af767180b22acf09c7745845

                      SHA1

                      55dd92ca3fb7c615a0f644e05efe0ca29c30cbad

                      SHA256

                      6de23156a4c7c83959f1c38838a130b2775a320055a8792b2afb67be5c1aa702

                      SHA512

                      156636de4f5f2af408ac45f78d29f72ea170bfd6bec462c7f8491403c141842b229b7286ee7f9cf9df493e6530fd8b862e7ece7624b784deaf6e51aef0e6a3fb

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000a

                      Filesize

                      1.4MB

                      MD5

                      fb2df56de7a549f503d1697ab3415c96

                      SHA1

                      306cfd9dea3a9fe20e4270fd7a68d2cfc733ffe3

                      SHA256

                      a47c178b95eae54aa28f6e474a917978f39960fd074474e4b953446ef20749cd

                      SHA512

                      92ee2bd86c55ed2e8da1d4d62d261b7c93cb2aeaa96b272c1b068166edac50d1d93fd6f5fa5eb7370c062a698ecc54a7492775b3a30ec6904e9a08c368f0b96e

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000d

                      Filesize

                      4.9MB

                      MD5

                      b22571f94f7f3375c099fdd5e146d907

                      SHA1

                      8610c096608b958c65dc9958eeb0efcc7066daa6

                      SHA256

                      be4444d6bc34e7176828dce560cd863233ade7669097173c94a2ca9f72dc89c9

                      SHA512

                      66c0286317212ebd39e5352641853e0d418ac32f4190f0191c5f59f9c46a3987a83c02579a48f5d3930e1a1d701e0006e5fcbe34735b05ca3f7128994d36138e

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010

                      Filesize

                      2.8MB

                      MD5

                      2a5db62259be575b94a30c335eb1396f

                      SHA1

                      ef49c9054bcba70b3ff5177be25dfb8a346ab355

                      SHA256

                      8064e73ffb3d58c991e8a277f99efc9f0a20ba9965857b5541632f202eedb18e

                      SHA512

                      be564c4bc90c1791afc98ac36b2f644c3c22338452a807e1ab8db0c61e95c7679cddfa043d7640f80dd479f3ad42bf87239e69c9abf79d2c97938d631ec3b931

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012

                      Filesize

                      237KB

                      MD5

                      8d753cdf3535d0e286c426651c661b79

                      SHA1

                      51cc5561696b3dce257a663902727e6c440d3ccd

                      SHA256

                      871c740ce3af35d9ee730e385100938b66cc8c3a300628c8531f32548c61892a

                      SHA512

                      3f382804bc377e92fbf4f90f646cbac96b7955fff9b29cee79bb0baeac98b4f574df944586f6cc865aadd26245e3489efc80d557c6266dcbbab401461705a764

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017

                      Filesize

                      23KB

                      MD5

                      4b2d5502db96af6e0ca9bb410b3bf162

                      SHA1

                      4317af0296631e14496432eafc0ea3070f415dd4

                      SHA256

                      52fb6b726ce48d4bc0d74dc5f4a4578a14081c27c3e5ea8db7861c6e5e1696b6

                      SHA512

                      21605c1ab8580cb0cac4de0f5d916b00356366e02500e9625501e21c519b77f8d57b4dbc3d2310fee2d8fb7209b48e2cdac9b2a6141d35281a123bf6383dac5e

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018

                      Filesize

                      16KB

                      MD5

                      461a12a3db12a079b69c1ef9230724ed

                      SHA1

                      8d50437d8649d6046cec2329bddbd524493fced6

                      SHA256

                      0ccbd9de179c7e05d8c2d1431940a3d7ef9adbc4e7ff1c793b61ae32ace93ff9

                      SHA512

                      c5324e9ac8f0e1b40ae36228563a74abd873ef63ee5507743f3a5a827b074a6e2c5d070be27953c08198faf68a8890a29eaa536772257d4a891412ffca6b2734

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                      Filesize

                      216B

                      MD5

                      d183d975d0f378e94b7a11be4b23f56e

                      SHA1

                      064e7fd97ae030554211eed6bd1c0c9f54de75b5

                      SHA256

                      270663dceb1a98643d93ae238e01377e9edee5840d44394ebdab1a2f0c8ff309

                      SHA512

                      f1e44330c41994befb14b0ce4946081fcba0c191a75a281a78c7d660d82937e8c91bd9557bd45a69f300cfa77a14496c6645de0df2dba184efc428e372658628

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                      Filesize

                      2KB

                      MD5

                      e2b8624d006ee9af4f016831e821b062

                      SHA1

                      21bde16b9c6c8b2c94b33066c7825cb5cba11e1f

                      SHA256

                      56129b19aa92c69eb807caee184a0dc43b3a528ea429f38922e8eebe1b4b0323

                      SHA512

                      b41fa38bd8a064bbb843b00cdeca63b6e98d8f08151de354af8e6733c225ab8756344ff4c289598e3a2d205de86f8d9e778992efd37649295c491a9b3bee5d43

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                      Filesize

                      2B

                      MD5

                      d751713988987e9331980363e24189ce

                      SHA1

                      97d170e1550eee4afc0af065b78cda302a97674c

                      SHA256

                      4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                      SHA512

                      b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                      Filesize

                      691B

                      MD5

                      584d70c2db93aebf64ec1133d3d18912

                      SHA1

                      f3180d98e25a2fdfa3d33b0d987135154be0f7b4

                      SHA256

                      827a341a3c1b8ea6b49d7f3b553f99213b53dff39df02e42e793fd31b86bb134

                      SHA512

                      a38614b9fca9e0b786d65f125f2fecf2a95bfd440782ced9a183c83cc6a2f83c10d5d3d4657f8e42df08b39445ed6d3c94c59e049550ba10f5dbd9cf8b7537b9

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                      Filesize

                      691B

                      MD5

                      f2a200dc362c86df4928cfc0489ec6eb

                      SHA1

                      c3d1dbe9fa260e4faf696c83d67bc27e72018da9

                      SHA256

                      e8b1065e4bc0c1cbcb70ce862eacb09ee35ea0084cc7a218f1882ae83f4ceab4

                      SHA512

                      9e4570a3e882954c10527aec570e08c29a93e4a44badd5fc61df090984e0de1f532096a411896a840ece97b749ef348a47ac41e7ed0835aec00f6dbe4239889e

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                      Filesize

                      691B

                      MD5

                      60511bc2f0b28af680baa2b4078916fe

                      SHA1

                      9c4443a4c2338a8d105c59e7664883abad771bc5

                      SHA256

                      289acc5bbbc932e18e8340e2ecdf91a977aca21f39280ffb869989e38598d94c

                      SHA512

                      bd2d4c67590e19bfe91c6ee2da20a68bf027a29901601312fc21993a042f71f706d9b5db4adda803dea7c4d695e5129856e70a8156b3d525e1c16457d3195dab

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      7KB

                      MD5

                      83f945d229d44c01b397399a78c5c547

                      SHA1

                      89cb69128605a0b0318ddcd4bff1f10201950f3b

                      SHA256

                      d5ba539561af84b55e8731070707c44f49e8a147cfdfa0bf04a3c21b1b116eb4

                      SHA512

                      8ad3082b02ba085a00c09bff4e7600ac3e5a715f6d98203249c7507d1a96dc76c06ad27bbf2caecdc494fcadbee5d8ccba0c00fb76476b95f30471eed03ad6f2

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      7KB

                      MD5

                      bcf1fdf701f453147b06f69b1bd654ec

                      SHA1

                      fbabc316d1a10495b0b4b26dcdd883c09aaa7467

                      SHA256

                      e23aebaa08d4bdd5774e9603da6f9ba2e412afdeb2c9aaa50a106f5d7b0941f1

                      SHA512

                      63e50f50b66a8af4bf503e669ed69c127746928e2a20386298957dc95081fb8dd32d21656a97b757249c1a57d166b9b6a174d6a6166a8127eff78e0ff75b08a5

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                      Filesize

                      138KB

                      MD5

                      fa0bd94b316bc0a70886e7e05109fc84

                      SHA1

                      b9f123249fd39fdf565466578c7a520de3a856cc

                      SHA256

                      684ddffdbd2b12a8850fb54f8da00ab50d6a2ff3189b01794f05dc9391110a64

                      SHA512

                      69bc6cd7c664b3202cd9b3b257c3899e0599c4ab45526c5bb848132540d88afa0f41e1c5d5fea0239c22d2c83c0b7c61dce5aff22b0da8227ece8f289bb499b3