Analysis

  • max time kernel
    89s
  • max time network
    84s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-09-2024 15:04

General

  • Target

    http://e2enetworks.com

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://e2enetworks.com
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4116
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffce0eacc40,0x7ffce0eacc4c,0x7ffce0eacc58
      2⤵
        PID:2912
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1988,i,8578790946987246496,11625157820675734977,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1984 /prefetch:2
        2⤵
          PID:5028
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1860,i,8578790946987246496,11625157820675734977,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2024 /prefetch:3
          2⤵
            PID:2852
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2232,i,8578790946987246496,11625157820675734977,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2592 /prefetch:8
            2⤵
              PID:3820
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3044,i,8578790946987246496,11625157820675734977,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3084 /prefetch:1
              2⤵
                PID:4164
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3048,i,8578790946987246496,11625157820675734977,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3176 /prefetch:1
                2⤵
                  PID:2440
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4360,i,8578790946987246496,11625157820675734977,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4364 /prefetch:1
                  2⤵
                    PID:1332
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4788,i,8578790946987246496,11625157820675734977,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4940 /prefetch:8
                    2⤵
                      PID:3592
                  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                    "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                    1⤵
                      PID:3304
                    • C:\Windows\system32\svchost.exe
                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                      1⤵
                        PID:2640

                      Network

                      MITRE ATT&CK Enterprise v15

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                        Filesize

                        649B

                        MD5

                        1c18910a686ee54b652ef5e77f9e5451

                        SHA1

                        55d1cdefc2c99052b6dcf5c006c774aaaf030b01

                        SHA256

                        ba27e49a7638ab730be205b95206f4965e4c57bf171360b2449d072bf3fb238a

                        SHA512

                        867b26535f8c7380a01a88dcf3057d2a0446cec14cfab0c2cf157109b259dacf62cf5a62d470dddd2adeafe0637b610d80aa35995bb0b4f2c6c3c3d4e37789e2

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000002

                        Filesize

                        154KB

                        MD5

                        a533abd24ea67eab390fcf974f826865

                        SHA1

                        61e5a6876298282157ac24265a7a5e4618e74674

                        SHA256

                        9d076cbb9e5ce9ce3d80f522335d891800dcdc54cb7f13e2b6dcb361d8a7ca1b

                        SHA512

                        78935324d52d4a207df41e00b51aac58e185e42517f38659f9450391acea39ca93dbf5277e6375dda3b45e420bcc3472d1f703e222e0181ce29aa467aefe5171

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026

                        Filesize

                        65KB

                        MD5

                        818e133299394b5d1d9a2887ace225f7

                        SHA1

                        926a77ba4f3cec7f777e05174cfdfbc89f753df6

                        SHA256

                        88ffcdf2230f2ddb6a545e7a7536c5adf79e2ab040c75cbdb324ed397c60d3d7

                        SHA512

                        6f336c75fcbe0b807659ff20dbe2e2c6e79e5618948ecc3236a1b1d912deecad37be4171d43183cef839082540cdc1fed577c5021ca7928cb386d26908eb84a7

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027

                        Filesize

                        91KB

                        MD5

                        c6e0fc90ff9035f7209d65c43e4f7e2e

                        SHA1

                        d04b38c8e909d6f0a39140a1aaef263c2350766c

                        SHA256

                        fe412cfcce96bae5565ed3dc764e211ff9d21f513ccf813d7da5f663f8287566

                        SHA512

                        2bbfb2a36f0a61b70b79265f105e0a3ee0e4cd501b53483f2917c1ecd698b22852467e1ca81195bc9174f1c38f2462b96983c3452d7121f57db038bb27a83642

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028

                        Filesize

                        71KB

                        MD5

                        4a1f4319403a73e1e29df6d9485c71a1

                        SHA1

                        0610ca54b9fa8acbb310f5a3698e0c65bbe869fa

                        SHA256

                        06e03850373aabe68adb7405b865855ac6a0be376ec4b6cb447b2a9149ae32db

                        SHA512

                        b28fd49604b7704f880fe204e26361569583383a8c39a785388bb41cb099adf84d65840ba04bc08d0b23e8c3a9f648bf9b88ed75e7c46eecc40e5661ecd703c5

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000029

                        Filesize

                        103KB

                        MD5

                        498d0bcdb51867a86e2ce0d19881d666

                        SHA1

                        ff3b42775f4b10376588e87e7390c2412acbd49c

                        SHA256

                        d6743a3bb7322a3901edad26afa9a2dbb1a0ac0788de6438611255091837d392

                        SHA512

                        1722a4ccd9bdf0c75dc015f78c974c0d53f0e02524edf4ea4f5642796ef3cfadde17945240c693da2579c12688e0c3c5e05d94bcd33fb45bd9a6424b86364c8e

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002b

                        Filesize

                        71KB

                        MD5

                        3d7a39cc6a24c4c2af083fe3f42edd5a

                        SHA1

                        ea02881312dffa51f12f3119555eeb457a2e1de3

                        SHA256

                        ab465ced2c8383a021ae253f5fc84ff7527c57c11556d1c3b49bf5bddeab650f

                        SHA512

                        bb7f76f26fe3492813a87ff86fcba7e5bdf817080b191578832aa4e59cdcc7b900d8f74f6e0a8f700bc1d91020d123a85b8bc137572aa69d18af2c33aeb324b3

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002c

                        Filesize

                        20KB

                        MD5

                        87e8230a9ca3f0c5ccfa56f70276e2f2

                        SHA1

                        eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

                        SHA256

                        e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

                        SHA512

                        37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002d

                        Filesize

                        46KB

                        MD5

                        7e5113ccc2c61201cdfac36bfbf30806

                        SHA1

                        e0a9d903d8125fcac2fa0b2d36a986fa0b4c05d9

                        SHA256

                        ad69da64be6b3f300efefe4092cb19ec752c88577409a67e94041e84354e780f

                        SHA512

                        0e783d3149376a1bb76fd25e5a20a5b3202a7a9bfc8d3c4ebbb954fec79bcd510b6937b511b019c90f3ed95d275779675fc48b902da23962a617dddd34e8ed1f

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                        Filesize

                        960B

                        MD5

                        64c169b4dd4a3b0408b0d5ad770523a2

                        SHA1

                        50a3f92d046a0482c0a9813dc2b51ec5e60fcf75

                        SHA256

                        f8bf68194248e9511536985d57c78da73fddbf8afb33a8002b5284164031597b

                        SHA512

                        f04d00a8ddeed1ef8080bab4ae19a0c7f7eaa01dc55af8c380fe0c3a7802e00dbacdf5407e2c307430483c1e46b5300d4944afe23a36c4f464bb21d8cba090e3

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                        Filesize

                        5KB

                        MD5

                        eaa7e3ada6a29411708db5bbd53f8fc3

                        SHA1

                        5efa58b1ea476a90ac912827e8dcb89ece72fea7

                        SHA256

                        00713afd6b6262dab9705aaae401bbd179cd0c877ea3b38748ec0ec85867dc43

                        SHA512

                        7e183c2e30c0bd529f6e1e9692caff1431c3386c38968f519da77207d63cea1370c6e2dc62c72fe55408245d0158152f5e2b66f7595ca714093c61c70a33740d

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                        Filesize

                        2B

                        MD5

                        d751713988987e9331980363e24189ce

                        SHA1

                        97d170e1550eee4afc0af065b78cda302a97674c

                        SHA256

                        4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                        SHA512

                        b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                        Filesize

                        2KB

                        MD5

                        df9d502b632f5975b354041eff3181bb

                        SHA1

                        2b96346d4c6dbadf6006f7ce3aa7430ab78ee0e9

                        SHA256

                        27b9e607b1977015ca7ce8ba37c3972df910ce155a647277db9da561cb67aa1d

                        SHA512

                        b674339c172a7e819ad7b70cb254cdad5ee5f535b7f08dfed09f8b39a8d2600bfdf48a1765a3a148f05d502d509eced12a4e401d95db1a9263a90b8978f82421

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                        Filesize

                        2KB

                        MD5

                        2541e62a7ce464d0870cf0fd735061d8

                        SHA1

                        306ff11de29d71510204f4b7f9ac22ef74703db0

                        SHA256

                        a24b8fdbc92e6956be0d6cb1c9270dfa5251386c9fe6da27a67c2e37bab2b9e1

                        SHA512

                        c8cff1c15f3eac6a703847d389813195d5d6daf7bc0bca2f0059c5be286244585cc49ccc0ae51ab580cc3f8102c10c256bfb4680e01e054440bf958c63f935c8

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                        Filesize

                        2KB

                        MD5

                        853efd9ffe1eba918d887e0ee9b47230

                        SHA1

                        d6ab6d852ab363ea0bf4b37135396a51e18d12f2

                        SHA256

                        33dab8781c6362b2639ad6c5197b9c9ee097058bc3b98bb468b6651c4f86dd7e

                        SHA512

                        fdb08fef1133f32a341f90d35de1cf319a8b40321444d0f955d0d8b513d5ba14aaf49d53377eff6fdc397db48b82ad50caf3cda007b21298da19a857502c370b

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                        Filesize

                        2KB

                        MD5

                        a6237894717d82a4baabef2213b07384

                        SHA1

                        2f60976d1e2b9cdc03ba45e26efd184ecc229eec

                        SHA256

                        5e2733b32b2451749d2201f989fbc3838e228c62d83330459fa7bb4fdd87bd32

                        SHA512

                        133f04f9972b11da0fc59262d27792f5c2c62b86af54e8a5919123d31b5bb4520edf9746f52c1c84819e32d9c61b43dd6e12ed5f7d4e42c6ee2f837d3e0ae29d

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                        Filesize

                        2KB

                        MD5

                        1d4c76ea655e59537088d6ec7b8de909

                        SHA1

                        b9d4192bb45f89dc16064313dab06c5f967eb27f

                        SHA256

                        2845e3f5ee642d13fe9ad63f8bbaa2c01cc0646a4eea2c79cd811afbe6367e19

                        SHA512

                        9c422ac71fcbf3357a31a85463fbeb94f1272186ddd2ed7606f0914d813c848fc7c8c2804548c4d0133084a0cad594261ebba534c636f59a071b287c01994a1c

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                        Filesize

                        2KB

                        MD5

                        48d7dca9c54871b238e2293ceaf35200

                        SHA1

                        4ac3739db8f1e0d714dc9d816fbeae5315dccaf9

                        SHA256

                        497fcf1c7435c329b78b303f36b59bca037625553a919b6de935035372531d76

                        SHA512

                        1615a9c897445c4326ee348b03aed0e1282c1b3774f5003d41269c8247eaf877de62348c1c6884397e73bf1f52e4ef8cf67081e80a18218e6e524fb69ff56e32

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        4a494e168948107a257a08d5dd702699

                        SHA1

                        00dd8cc31f70f76286fa56bcc332b197ae6b14f6

                        SHA256

                        4356b4437c6aec5e4c0eed884686c5502719c3bc889324f7a420529f6a772225

                        SHA512

                        6ef2db69cc56af9ab9c54f7ccb7d9c44a0dc527b044da02cf88426500d49fab6a084df38a8aaf45144fa348d17e3c499f29431ca137fc6dde8ea4ab52826020e

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        5311c1f69358c2e526594f9768d67460

                        SHA1

                        3f721fe6fa6a7a853bcbb8934e1e488e96034f7d

                        SHA256

                        81afa6fa65855a99a13ed3261fa8e43690282813fd457794af23515fdb7ad19c

                        SHA512

                        e8d295bc8c233a57ee0f0d39175ef9a032d0426fc2a57a7cffdac38567c9fda19ef77c4ce565c67370c18110ba1ede3e44931a7fb7c7058aae03fc61dfecd322

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        d76d7e4f7e40d4cddce2d0c1a254febf

                        SHA1

                        e9d07f2e89165ec515e073bd830a902f0ca76a84

                        SHA256

                        c7e6de57f7f91ebe7a731e639eaf8290db6baa260cca7f8b9049563008072a61

                        SHA512

                        7f9bbcf06233685e9a0ed2cbf4d4f8400189118f83d8da3c9615ea50d15dddabb707cfca9afad81d8224a69fb4e56dd5ac6bafccfb04918f0253cba50d994edf

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        bbd177c7e3128dd50bd35312ca08f29b

                        SHA1

                        818c25c270ae85ef009c42d6a46b81cfe990376c

                        SHA256

                        e2f61d7df61fec7339faf17ce20c6438297351c041f9a615ec6621dc1988887d

                        SHA512

                        bc74d8ef91b8cba1ed849495bae36c8ddb538eae7dce16b2977c463d28cb3a0681a001215737e273ad27e3e06094d46eba3f5bf57914ebb68a3f0c396e2dd31d

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        d98dcbf6374a06cc1f2c3cd29c449ad9

                        SHA1

                        0b9e179468c1962aa7825f34db5855101c61822d

                        SHA256

                        4f8c609876361660de808cd58dd89ea9204a9f1e884a3c80d5d3e9347abb24d7

                        SHA512

                        04dec110e0bdc5d9526935c5144909573852a4f5595b96bb72c67db76eb78f90fc289c462f8ce19933c81b81a319397acf216485d7a28fadf699f7932cab83ca

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        50ccfbe9551312806f2ad7aafc4b1bad

                        SHA1

                        f0f064971e304fcabd3acc231546d676dce6d03b

                        SHA256

                        de10d9a242c71767fd8b397f4dec0dab690264f30df8b0320b25d530d554324a

                        SHA512

                        2d02b580b268c83dcdeafb78da837f56af264034ed9efbf60260b50b5489a86f5d07f8e2c3af1eaeb4cfc5f6ccd3eb84d1e14d79f65213e06efdf8e1069967b5

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                        Filesize

                        99KB

                        MD5

                        12e83e5fe0ec5eb6fdc22c016715da17

                        SHA1

                        a8573e33bd6859225767dd5339fd2fcf50289596

                        SHA256

                        82f2e34c6a2f1d037f084706145a681b578895a5426730a074a6c30a9b8fb324

                        SHA512

                        6ced11de7dcdab959c7ac364429fc1f26bc0a70aa7d48ec664d08f1b47ffcee552c3a5930022cf8ea032ce32656caa85bf451a0923f06b558c972c8fd4deda9f

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                        Filesize

                        99KB

                        MD5

                        7aa235369738a08840176f858810045d

                        SHA1

                        784fcacf4386acdd4e17243930ef8fcaca19d29e

                        SHA256

                        2cdd60cd19b4c60cba53f7a9bc7cbd9c4c95c06d4c99764e9f4a9aa2da9a3f4e

                        SHA512

                        08588d27ed600705320ba05fb9a79ff2a1d2fb199652287ecfbb47231b1d934e50a8b887221a31dcf86acd71bdca3edfc81bd35f1bcfa42d876c1fda24ed4149

                      • \??\pipe\crashpad_4116_NDYQDHLFZBOBRVCU

                        MD5

                        d41d8cd98f00b204e9800998ecf8427e

                        SHA1

                        da39a3ee5e6b4b0d3255bfef95601890afd80709

                        SHA256

                        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                        SHA512

                        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e