Analysis

  • max time kernel
    112s
  • max time network
    109s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240709-en
  • resource tags

    arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    10-07-2024 21:10

General

  • Target

    https://luxfermagtech.com/products/food-beverage/

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://luxfermagtech.com/products/food-beverage/
    1⤵
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2104
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbaa3ccc40,0x7ffbaa3ccc4c,0x7ffbaa3ccc58
      2⤵
        PID:1540
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1916,i,3494183149031348473,7055210533356554875,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=1912 /prefetch:2
        2⤵
          PID:4124
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1684,i,3494183149031348473,7055210533356554875,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=1956 /prefetch:3
          2⤵
            PID:4528
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2180,i,3494183149031348473,7055210533356554875,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=2200 /prefetch:8
            2⤵
              PID:5000
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3064,i,3494183149031348473,7055210533356554875,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3088 /prefetch:1
              2⤵
                PID:1872
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3092,i,3494183149031348473,7055210533356554875,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3120 /prefetch:1
                2⤵
                  PID:2508
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4596,i,3494183149031348473,7055210533356554875,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4752 /prefetch:8
                  2⤵
                    PID:4708
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=3720,i,3494183149031348473,7055210533356554875,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4504 /prefetch:1
                    2⤵
                      PID:4820
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4496,i,3494183149031348473,7055210533356554875,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4476 /prefetch:1
                      2⤵
                        PID:3008
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=3112,i,3494183149031348473,7055210533356554875,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4748 /prefetch:1
                        2⤵
                          PID:2880
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4436,i,3494183149031348473,7055210533356554875,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4072 /prefetch:1
                          2⤵
                            PID:680
                        • C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
                          1⤵
                            PID:2700
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                            1⤵
                              PID:4608

                            Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000002

                              Filesize

                              83KB

                              MD5

                              e672dec509a10f162c221e7cab7d8b0f

                              SHA1

                              3977f4cf45b969a8dad92ef0cdbbd0077b667c48

                              SHA256

                              0a09f8a73c5595881d4394f305ee703d760312ad11fc8bbb32a1565b6d2938c4

                              SHA512

                              b6e49c82528b59d14751d55e7f78d053521a836da7d833ad7f447879f415958dc4de3cdb0a38e29e71745e99ef189ba2004dbca7035db77fb118a2436434ff0b

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

                              Filesize

                              102KB

                              MD5

                              1f662c43ae0f766cd353fca35c45d70a

                              SHA1

                              c3f9b1d18075283c7731fc1547612f5c67ea0aea

                              SHA256

                              5be720768c98984b151b6c4c9e2ab287c7fedfe6aca87bc8a5947ec6d7f1847d

                              SHA512

                              cfd6a0a458fc515f84063460fdfce100f64a9e7129a4dbb8905e82bc0e373226378eec6ee938b70785714cc8bd5851ea45909f6b8c52f034c0d428a5ca6deeb0

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

                              Filesize

                              20KB

                              MD5

                              87e8230a9ca3f0c5ccfa56f70276e2f2

                              SHA1

                              eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

                              SHA256

                              e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

                              SHA512

                              37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

                              Filesize

                              211KB

                              MD5

                              151fb811968eaf8efb840908b89dc9d4

                              SHA1

                              7ec811009fd9b0e6d92d12d78b002275f2f1bee1

                              SHA256

                              043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

                              SHA512

                              83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020

                              Filesize

                              69KB

                              MD5

                              6c50abe4b156f5bd63508494110108db

                              SHA1

                              fb4cfc738dac6ebd75891ac0a234fcb03b667906

                              SHA256

                              7b7f799483bfb0b87e245f243ec60f97b191c83c8c211beab7f5aa2f4004b389

                              SHA512

                              8784fa41b6d7e7d749a8759219b07bc8fc9cf2974d5d0cc9519665f62ac39c8c82fb4db67830a785c401f1eb25c930bf20f0b4944e3fc4430c54345096a59a83

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              864B

                              MD5

                              e7a5a35cc2aaf844b8a8e611acf4a27a

                              SHA1

                              33812312302656a0c1f976c70423db02babbf493

                              SHA256

                              939f5e9d163e56c7454457f142c86f122840a1978ac2bca0339024e471a9796a

                              SHA512

                              4e67a310efe2bddf923251a4dd938a421ff18e50f6c377321fe3340d96e3e85d73164d40279dcf4e4e04e246679ec080a8158bb8dda91b840f9dcd6714f606bf

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              408B

                              MD5

                              6e7abbbc0a6ffd06206bf0fc7c42bcaa

                              SHA1

                              08517b573ed5ddddaa664668052fd2d9e47988f8

                              SHA256

                              b66c2c1394b050a62bd58ee81e449dd02f51cc9985e2e40b99884e85072c1a3b

                              SHA512

                              7b5af46447bfc678df77f6b0a14c451c8672a64bf7e6b0ff4ab5ad13e16e32d8d5d53a44ff3de1bd30a360e80bf384606808a586d1f3d444f943d1125f33f425

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              6KB

                              MD5

                              0ec4603b1b7445da94d783587dc6ea94

                              SHA1

                              7eeca37d027832b476ef8c74a60feee143ae557c

                              SHA256

                              5d2a996f2a636eab4bc687586e60ea8451cc0863c3896f1e7ecb4bddc7cbb58e

                              SHA512

                              934955f3204cf9a3e3582b4c38a8b142c889be45df06b37eba06b2ed81f27420849d7ee3335e8c03dd75fdf91937b416b9131622db8215d0827141477f883024

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                              Filesize

                              2B

                              MD5

                              d751713988987e9331980363e24189ce

                              SHA1

                              97d170e1550eee4afc0af065b78cda302a97674c

                              SHA256

                              4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                              SHA512

                              b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              1KB

                              MD5

                              0d8fcaf5f5d2c083a927eb59a12766ce

                              SHA1

                              74835a35fe117f36b5f0cbad0a3b6596167a177e

                              SHA256

                              56fe3ece2b48840609874ea31284b0e3e05d55db572d55b0b64cfa9c27db2b7b

                              SHA512

                              a1f45adbeb78ae45cbbeff379eb3c70737991863d6fa47b8da49c55c4df00fe74e27d73d432af93b30e0773e988d9f2a867e4b90afdac5104ff4566272e0cbe7

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              1KB

                              MD5

                              12de6d6bab59d1bad64a53dd4a490c0d

                              SHA1

                              a3bd251e7f42f85705a82c2fe18e301a11121b42

                              SHA256

                              07060928dc9ce54b5845c6ae1eb33c4a9995db6b270067fc4baa36d9f53eacfc

                              SHA512

                              8dd083919c0f28ac7657fc01a7cfaac4e3d68fbd730b112fefcf3c304e203fd61e2b69425d402f17ca201adad591a5c93860ad41d285f44a040c4865b6267d85

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              1KB

                              MD5

                              86c7b37c0b50d06e50ec6802f1b69a78

                              SHA1

                              e288eb70df6b7fbe2c8182a34c5c006cbc994b40

                              SHA256

                              4b61bac7b3bc4649c71361724e2c2ab09ff53d18c33e8b574702c4c8ad16ae57

                              SHA512

                              a54c2e8817963ec2fac49b58013aa6183d53595f574272ebb4ba2cfcf58adcf853c70b9b7a5528b4870de8cfe5072e2a4c8e4834d3eb64b5ab257095eb908f82

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              8KB

                              MD5

                              70697d5fc6a7c7c72f8ba745fdad85d2

                              SHA1

                              889399ac90fab6c8ace035d514fdff2cd3ee523f

                              SHA256

                              82aeaedd6e17f5e70a4d5a4206f241e4288b7ab6ef2fdf9a49906060443eca34

                              SHA512

                              bc99510801199650a75346583932682ce3fddd4cbd1157affff6752d7417dacfa18419a6d687dbd3504594f827c75b77bd9be8d5261d8a4a3c49807b31301b4d

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              8KB

                              MD5

                              daa659d775a96935a6247b7754e0e1e5

                              SHA1

                              dbd548d9c5fbb21ea3ffd1262199d416a5ffafda

                              SHA256

                              66449ab4189f730f55041bd33cf31d5a087c9755aa907df9033f4d1703fec0c3

                              SHA512

                              b5d5942f5d1ee04bed68dd3f269fbf8b279de9e60a0889079252f734afcc5a3f3607356adb3b9a3403ccd111aa7520b20e171b5b93ab69beff7f20359412ccf5

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              9c61b79d4c9e62843037001083c1ed63

                              SHA1

                              e69afa83a3a6f1639395d705e40c358fa12edb0e

                              SHA256

                              581c1876fd9e0d168a80f09d45c7352c59c7cfe3f5cab956c22810c27ee6c073

                              SHA512

                              d1c98cdec69861d741e27011f1cd68267ab09e383bc245e473d311f6bec39cdb955609dfe4bc385e4842f7fa47b2e1205d424703ed76884880da063d87ee3172

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              8KB

                              MD5

                              3af2df4e16185e964525f66384abc7b1

                              SHA1

                              c6be3002106d70b9e27dd9a2af542fade468fc0f

                              SHA256

                              cf8964883fe39c15ffd88026c826eaa03f163b3b46af095c214fd29b42e5a7b0

                              SHA512

                              dab099ce9aa355b3e90ee47e594e363e85a22504412f83a9885ecf5086f3b0e126ad65e235b98defe91318da6adca763ce0add4f115ca975b626fa4787f0a770

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              a14a2a7fa86a5fe96d82a3d72b6ec78a

                              SHA1

                              4c321a978a61e485089c4388e8d5afd65bc7ae77

                              SHA256

                              d2462c12f74ea250afe70297ea00898f360bd1c71a8895546169d318491916de

                              SHA512

                              0792b2d7db534af93145f5d6997f290a0de1259afee35fe35392679a958996469aed39ea66057b53a8a6c46afea2741b1a68af6a417ed5b080b98708503f3f40

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              848824f71ab2a9c54e47905b02ff579d

                              SHA1

                              5587ee9331903e67e138932b75f7f2041cc30a7e

                              SHA256

                              30215b81f81c9063c9763b66e4c6b07d8c6814df02000bd334404c183018afe8

                              SHA512

                              0b4ca17939b1f4e6e24df0055a30bf2d006517ac69424052c2ec0988ae40d21ffabc7a1791e18b69f9b8c3dca50e2eaaafb100d20173824073716414b71943e5

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              cb4ba6774c43575c48214fee7fa8e409

                              SHA1

                              46f42d7cc2c84eef08a6ff1547e5c8bda67d9139

                              SHA256

                              062f0f40bf07cadd2405f2d2f6535ff5eed575929968cf54c535932fa3a3d74a

                              SHA512

                              13c913ae136781e049cc01c1a6eec3263b96174424eafbff8d4a8575baf74c874334115e63a7f5f5c605e86daceedfcef0c212d285636551c5fd50fb72e5f20a

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              00a7774eb0f294014c66a3c2307ccfa3

                              SHA1

                              441ab4bbd025e048d327db59346fd381f5d5e80b

                              SHA256

                              b22d47653b2954bf921d0de27329b9c1148aa73f9c3b12d997d0ea27abb2fc91

                              SHA512

                              290b1b75670b5b0773a7e81b2b0badfd308088a2deeafaaf27598eb3379137c62a65a3d288a42562d9f56fdf5d78575e210b3e171ecc3f1947896d6cf150d548

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              92KB

                              MD5

                              9d035f68f94c54f5e22b1f3f7f307f7b

                              SHA1

                              4e288bc6dd6bbdbce60567f403b416c3571ee0d9

                              SHA256

                              e196ee40b51a9492419adc3ef847d33244b3456f68b58e3cad7c3641aebd8599

                              SHA512

                              c90a9220cabd8b0ab87dc8858375e10bd6a6c773dd4f155bcbb2aa068aa5e8827eaacc96e37ba77d32ba56e5a5aee9cdce0b9b741544fb951b7408fee0ba0e81

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              92KB

                              MD5

                              b5b09af6040e2f9420f961c2cc1bbbc9

                              SHA1

                              309bb4f500eb2191466d38ab52b36102dcd82f09

                              SHA256

                              530d15ee56b5ecc5f27a793a59f4b5c73fdaa1730894c975dfdf0e65d9bdab43

                              SHA512

                              f8cca4297aeb79d98c41cadac1eb12744642861f5780b8ab177b5e578b456e9eb81d7d59473fde343ad43ce0c263ea69d398fc316bcd195691c05a9a34bee5d0

                            • \??\pipe\crashpad_2104_CWMNYZZGSQFZQAYD

                              MD5

                              d41d8cd98f00b204e9800998ecf8427e

                              SHA1

                              da39a3ee5e6b4b0d3255bfef95601890afd80709

                              SHA256

                              e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                              SHA512

                              cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e