Analysis

  • max time kernel
    132s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/09/2024, 03:38

General

  • Target

    https://innovation-data-107.my.salesforce-sites.com/businesssupport

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://innovation-data-107.my.salesforce-sites.com/businesssupport
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2256
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffe7afccc40,0x7ffe7afccc4c,0x7ffe7afccc58
      2⤵
        PID:3864
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1940,i,18243931092462145998,16751985392314435984,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1936 /prefetch:2
        2⤵
          PID:3456
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1852,i,18243931092462145998,16751985392314435984,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1972 /prefetch:3
          2⤵
            PID:3452
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2252,i,18243931092462145998,16751985392314435984,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2260 /prefetch:8
            2⤵
              PID:2380
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3128,i,18243931092462145998,16751985392314435984,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3136 /prefetch:1
              2⤵
                PID:5112
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3140,i,18243931092462145998,16751985392314435984,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3180 /prefetch:1
                2⤵
                  PID:4804
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3696,i,18243931092462145998,16751985392314435984,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4472 /prefetch:1
                  2⤵
                    PID:3292
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4872,i,18243931092462145998,16751985392314435984,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5004 /prefetch:8
                    2⤵
                      PID:1008
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=3688,i,18243931092462145998,16751985392314435984,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4796 /prefetch:1
                      2⤵
                        PID:3588
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=3144,i,18243931092462145998,16751985392314435984,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3176 /prefetch:1
                        2⤵
                          PID:4932
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4760,i,18243931092462145998,16751985392314435984,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3224 /prefetch:1
                          2⤵
                            PID:4644
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3264,i,18243931092462145998,16751985392314435984,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=5356 /prefetch:8
                            2⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:964
                        • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                          1⤵
                            PID:2168
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                            1⤵
                              PID:4324

                            Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                              Filesize

                              649B

                              MD5

                              5d1a621ecbaf46e4fda920b2e09278e6

                              SHA1

                              935e444dc86559da9e2e08a723805ed49882a3fa

                              SHA256

                              c4b0f99be2fe0152f9f93ecaf4c6df529644e990d68ca40d1b7a5ac3d242f4a5

                              SHA512

                              b3bb18b8807d89c25836462ee3610fc109f57ccf4c9e7bdaea410ac213f796b348eb39c1cab4ef1b010680c244c277c2311e032f52df6a84c15053204505724b

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

                              Filesize

                              212KB

                              MD5

                              08ec57068db9971e917b9046f90d0e49

                              SHA1

                              28b80d73a861f88735d89e301fa98f2ae502e94b

                              SHA256

                              7a68efe41e5d8408eed6e9d91a7b7b965a3062e4e28eeffeefb8cdba6391f4d1

                              SHA512

                              b154142173145122bc49ddd7f9530149100f6f3c5fd2f2e7503b13f7b160147b8b876344f6faae5e8616208c51311633df4c578802ac5d34c005bb154e9057cf

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

                              Filesize

                              24KB

                              MD5

                              c594a826934b9505d591d0f7a7df80b7

                              SHA1

                              c04b8637e686f71f3fc46a29a86346ba9b04ae18

                              SHA256

                              e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610

                              SHA512

                              04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\03ae0658db22f33f_0

                              Filesize

                              289B

                              MD5

                              36c1e08862f89108b7e5ad22d7d84590

                              SHA1

                              ac4adfe10020a51fcd906de641f0cd980530b252

                              SHA256

                              4d352131f6017e2f8d248f84746ad9d6e770ed948edda691cf0905af93f1ec95

                              SHA512

                              92f5fe388b255e9c64b1fbc53f37f71351fd198f30e15011d9ee803b00fe91945b201e0115f37f15ed85d43d70f0d038b6833be175e84e233b107386dc3dc0bb

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f1e238929875955b_0

                              Filesize

                              370KB

                              MD5

                              9db054883b0b119ffbadc2f251530694

                              SHA1

                              924c3f7e73310529cc2eac39012c915c5b28c8cb

                              SHA256

                              a224a5a5a7ce0ce74b1a927b6c819a51ff69e7417e000adda385fbdab20603d3

                              SHA512

                              577df65a3bb26dee04b7ad79ae713d151c798440d39222e2a2120aae848122e27f6b4a6b87b9c69ab8f14c27d8e3e36a845d18fd54019277bbcaaecd13ba81d6

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              312B

                              MD5

                              61833b2c04b03f65f32d077474ee3a3a

                              SHA1

                              212497f089f622c5b5d326d3040ce3c058aee699

                              SHA256

                              822374cfa2b6c8671cd99ca16b46d547ae300d745de1ca3fad47b997c3ba3bf3

                              SHA512

                              00c1074a75e5ed25f1b139f33103bdef235bada02ce709af87f3a3ef174c78baa522fe8301bfcb6a30fc4fe44ce4a8d2ed45a77c6165f04628550ca174816269

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              312B

                              MD5

                              aafb22e7302883149fed4dbf23a94ef5

                              SHA1

                              b7c1daf6cd55ae8585e47294277b9609677229df

                              SHA256

                              b795a5e4ed56d8ba827b8f55846d97da13cc59531915f1640f58927971a0a4c2

                              SHA512

                              ed428eaad706d37ced9818a906b3f34fd563c150686727e346f4420b1dafca7684bbb7a9c5a45e2378f946acc68004f6e33c91ceb70e5ba388e9def3fb5d2539

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              2KB

                              MD5

                              e073c7b275c214bba4d2e77ef55ee17f

                              SHA1

                              0a55d6684e2e37ab699227fbfff0e8b7a8e667b7

                              SHA256

                              ca9cac403b6c6d628e1de03772ccc7a6b9e7ca916d8fc408ddb9a11206bfccf1

                              SHA512

                              e358cebec862a0a0305e4918503e56c3a48f95ef9ccb3f504affd79c5c0da3dfd42bfc3a19979f63c85e5663cef06a2e3ba9c5b6cccd104346ee44b55f1100e2

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                              Filesize

                              2B

                              MD5

                              d751713988987e9331980363e24189ce

                              SHA1

                              97d170e1550eee4afc0af065b78cda302a97674c

                              SHA256

                              4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                              SHA512

                              b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              521B

                              MD5

                              63e6b456490d7d6bf9e53d2ce62655bf

                              SHA1

                              9cfc15dffd10787b7a49e3c3bac5f54e70976bf7

                              SHA256

                              63b80f88fa1cacf1f47cb8c2cfb5d1b9bbbe6e8f46f044f719f17c379f28aef0

                              SHA512

                              6b236590179d2bd7869d772a98df27dcf39e3c1d077c1fe314967669581aee945fafeb0f7ef610a01e01b10c1ac766188097bca42c9dc61e92238448da9f6a7c

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              521B

                              MD5

                              e1c22b8529501b7dbc9e75751c3e17a3

                              SHA1

                              d0fe733fc7a605554d989f776fe37de8667bd62e

                              SHA256

                              a5b5b4bf81757f436086ce02177243ba94f042b9ba6020d04d387b001c6e3504

                              SHA512

                              e2e7710aed38c000147437d93ee27790d227b5659e8c3337b8f00f45383221fc354807cea5aca573d666f594f77e6e6b7ac4913ed716d85f11145a8fcb9cd9e9

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              f844c8b26c9bbc2a0417676798a813c6

                              SHA1

                              db2d53932f6c86c92f6aa33f963ed430aad0dc50

                              SHA256

                              aaa1823b98c8d91d11431fb72bb9d1d931885388399e14e92f8517c0d2be493a

                              SHA512

                              302f80348e5b0863e64226843909faa60691aadcc571d6a251efb876542e56db5e0bb3d35eedbee588911a537a1a61d43b4d265faa788b2438a449fa1011b863

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              504c38d643334a33639d708e8f25b927

                              SHA1

                              9e5cc140645c3a44b49102baeed2214733f29af8

                              SHA256

                              a802de67ff9b0f30a1c02db4afdc5b90e12366fa383e09fe05a41fd4bddd6736

                              SHA512

                              5d9bc616d751c4980ceb909556aa4e8a57a63ffdb0dac6ffb25e809880665ab8340dd70c4d69908997555e5712a34dc57f0ce76ee53b88e7badbaecbcab8ef92

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              1269f54a9638405feff090f9d3ff6cdc

                              SHA1

                              498d937f8555a01a9c580aad109e2e1c8a9e99d8

                              SHA256

                              179655775f1a3678ad22620c30ad7fb9019bfaffb961a4b0feb86202b1536fcf

                              SHA512

                              fde8a56843fce99a7efea88a2d904b48608f1ea34884d806e04ad9e90195a0b011b22226eb142f687ace3e7f1de1abb68b09369ef6cc7c2d8cd1beb24b4796bd

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              e40d85b521a8f9f53455aec63b57d478

                              SHA1

                              0fcdf90a77af2c8dc0f902a5b5f711aa1c211a00

                              SHA256

                              8c1955b3d18c2f59df2354ce4cfe5204d7790d3e640cc05a355805ac2c9a498a

                              SHA512

                              a6e98f9634000579859c74313086d1638a5965e016d2914c1e6bc24c3884531163e189d19582b0097d2a3cecf089d7517faf9b0185fc6cb2479bcddc7d2c00f4

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              5bf6ffcacbe67f2d71811f539c6ce0ad

                              SHA1

                              9f361f3c1d9bef271b220247ccdf3d4c13907b97

                              SHA256

                              107182a652b899bb685cfc0101765fd356a146a1d038648a0c90e5df73d3c546

                              SHA512

                              51a332a00df80cf8f847c6df7fc0f2c721d1514796353f4f5b7c98d9ff5f3bba6ac12bbc52a54382c3c18bece1a11d1bb03c587c134b48b045412ff4ba348ea4

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              6866ca2fa0cd28b2c260707f96fc04d1

                              SHA1

                              873e2f05d4909a468e462a22f86562f2b756ae24

                              SHA256

                              c495bd187ad93d2883bf7a21415b9f31957f6897c11cbeb2e7a5860c7ddc68c8

                              SHA512

                              d1c18ac89c8b79934cdc2f5d0e4ce51c08991e3e3e80361d6c787fe4bd01399ce73b57518eb4384d559fabed45de34987dd019626be27862d8968f7bf049f4fb

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              42bf6f8129143d6f0122692c6b035631

                              SHA1

                              c884854e1cec2ed7d8f2e6c44604ca6dc75edcd7

                              SHA256

                              7e6ead97392f2932ed8ade231dc5278719d823bf7c3c6e724271c8e7668147fc

                              SHA512

                              dc03d885a734498f790771aa41534113b3869a185035ceaf49022d0a7a1824ad84a6e3de79ee1913b4b1d42241169f66bbe03b39573318f0a5ee6ad2fd766e68

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              99KB

                              MD5

                              25c3883093b6e9a819d28593ae5ca1b3

                              SHA1

                              1cc6f8e73419dca0da122043f2fda20cfb1590a6

                              SHA256

                              02830be65e70edf2313413a9e5bdd44c3057c69f63bb58268004215ed0a95980

                              SHA512

                              57a0db27c63644ad9be82ffa422f0620aa75d82131f2ddb73c4cdbcd9e022e03258e360ed15b334ff213f0de283e65a1091ad3f59f450471abffe9ad4e69d6a8

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              99KB

                              MD5

                              f3c9a2b6793a3c9b94d6e1c048b4385a

                              SHA1

                              7ea3b9f1dd9560094d849c5312cea8b3c21266fc

                              SHA256

                              5f8d7d21c28a582d853637d0776cb27a42c882a91f54585bb06fb537f0a4067f

                              SHA512

                              b8b7a642cd9260bd387b382e42b6b70fd500e0841b595aa7aa06c0d114ee1383a56e4a65f6e6aa1ba7696be744ca2b1eea54f7c30ca492df3bd01ecca87a4734

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              99KB

                              MD5

                              af92667f60656c6559dcb90fe8ea4d32

                              SHA1

                              c755fbdcccf9a4f8a681c9a12ff71134d8529ac4

                              SHA256

                              704e3f7acf12d5c1647ff365fdc65496d3bbe7bf284cad12e69abab34dd5cf3f

                              SHA512

                              ed123db1b77adf569f6fa0030c7f0e7d6facb09e8a4d9a7043023d776fd48649376eb85d78dae643a706d9067ba7ebfde4f3a07ce5b5a19451cc4a8cf6769de5