Analysis

  • max time kernel
    299s
  • max time network
    273s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/10/2024, 21:06

General

  • Target

    http://oecd.dam-broadcast.com

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://oecd.dam-broadcast.com
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4040
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9b2b7cc40,0x7ff9b2b7cc4c,0x7ff9b2b7cc58
      2⤵
        PID:1572
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1804,i,11827515256691980347,1754848115469496660,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1800 /prefetch:2
        2⤵
          PID:4996
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2132,i,11827515256691980347,1754848115469496660,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2160 /prefetch:3
          2⤵
            PID:2840
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=1224,i,11827515256691980347,1754848115469496660,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2424 /prefetch:8
            2⤵
              PID:972
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3028,i,11827515256691980347,1754848115469496660,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3044 /prefetch:1
              2⤵
                PID:872
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3036,i,11827515256691980347,1754848115469496660,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3224 /prefetch:1
                2⤵
                  PID:392
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3844,i,11827515256691980347,1754848115469496660,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4500 /prefetch:1
                  2⤵
                    PID:3300
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4364,i,11827515256691980347,1754848115469496660,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4728 /prefetch:8
                    2⤵
                      PID:1852
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=208,i,11827515256691980347,1754848115469496660,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4872 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:1844
                  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                    "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                    1⤵
                      PID:2288
                    • C:\Windows\system32\svchost.exe
                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                      1⤵
                        PID:928

                      Network

                      MITRE ATT&CK Enterprise v15

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                        Filesize

                        649B

                        MD5

                        885ad129193a781ff918f931f57f54b3

                        SHA1

                        06b4d47b7f6f0f33b614ce1b21660dae36ee14f8

                        SHA256

                        b332d451480dd6543fe6817554ccb0953cec43979812410d0901e8e1d77344e3

                        SHA512

                        a402f5da349c27d6e1e08db8295805d109fb76637307c363d7f4ee7d00d305b11fa899df6967c0d9a7bf2b66e417b157bef962d195aae7e3e2b652cc6f4aec27

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                        Filesize

                        1KB

                        MD5

                        79d198434531b8be0517ffff2a529651

                        SHA1

                        8b988da36a2a6e229f5ab265e0118890148f16bb

                        SHA256

                        9deb5d1114de70abe5db30ab5dea56b7957c985ec3571537017e7d1488f424b1

                        SHA512

                        031dd08b90bbf32af0eefc72558a50551d540d2c11492023136d98d2eb94a8250b7c8bf07542bd5115a93540a3e6f1076a94bcf1cf3523b855d6dc846e7cd5ce

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                        Filesize

                        2B

                        MD5

                        d751713988987e9331980363e24189ce

                        SHA1

                        97d170e1550eee4afc0af065b78cda302a97674c

                        SHA256

                        4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                        SHA512

                        b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        ab5e9ba5843638b2817b020378735338

                        SHA1

                        d5c492b4463609dc09e3f68a2da583b8bb9abad4

                        SHA256

                        2896c2c0edf34fb2275d165a3df67e12569e764f0f6c8f19165c3a4d83c8cbad

                        SHA512

                        9c3ee9b99aad660999fc0509fabae8fdc40f9f9c9cdc163a3f3903cfbdefb3cc43e6b82a1ab2f6f8be84fadceb0a1051b30fef73789554f22505fadb82b1ff11

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        3c4a6b208411730e45fae9907d59e041

                        SHA1

                        6e33cb0a1e0aa081b20fe340627e970e0895a22a

                        SHA256

                        f614c68928d2185efda757722917b6bc76a8ec2f8e50b11da3cf27ec08df5966

                        SHA512

                        6fb742818b0f4d589f56710dcf9d1198bae1be2a146bfd0b83dd98ab7e666d41afd19fa8bfdf7b59a5a10bc447ce4d753ca1e6420d7b6ef628c1fb9e630bdbfc

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        f6787f7750c2894bb7d419e4ea708d07

                        SHA1

                        3bf3d1090cd9c8c4a712e1f8bdfcf560497cca00

                        SHA256

                        686d63a97a2ba969acc3346599c9b6f8afc79f09ebff3caf906cd4ebfa84d74c

                        SHA512

                        a5c6b77bbdf97087f15905777d28cd828a32e60c5c1ca8aefa225c12f36f09a212484fd28e3bb8b1bade355952a1924afca4a28f7131dde135200049fd6d8807

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        c5dca36aaa6fc894afa27fcea87f08ef

                        SHA1

                        60ac9f40b17e48b73a49911d96b1d3feb7d87371

                        SHA256

                        1feb295cf1cd55e4942e40f64313c4c0026d39ea3d6d16b93ff23f007ff100ba

                        SHA512

                        f70c071a4b024ef4cc4e1b92407ed81c4a45b4c2a9b13197d998cf9807ca6cabae37b0df25b5791f251c199f765b92ea567df1dc0e9f814ae3f46c14964743d8

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        1bbf5567c8af10c528f921fb0dadd35e

                        SHA1

                        7b2fd89c36bd63ea3c77ba258f9f2252db2e3478

                        SHA256

                        ad3855e4f7a7023c1cdeb48783c09e5a30ec5c3775b0f6fcbc5a96a7d067960c

                        SHA512

                        2b20cd23cf7babd9aa3a9f30291de38d642a8d9195101a741ff8d520bc610d8c284871a9aa916d01d704049f59efd57721e3b441f73a8b4f36e176036bd353cc

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        668f41f04a624dfc832c940ef9532cd8

                        SHA1

                        7ac6e73a448bf7286f9ec88c24b9115949eb235b

                        SHA256

                        513835e9558926be9b3d0ceca342c72254490ab51f6ada482b78527a04b3ca7c

                        SHA512

                        5d2e01661e3bcf6a5a0a58f5d9248506d9ccb238d35facfd2749643238844b8d8dcdbb2bbb30e1da7e4ba7b0646b13c77102379ecd855e2e23aef651fb47477b

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        09c9ee20e59a9d5e34d773568543d5bf

                        SHA1

                        5b201a7c97b0f4a7ef900ff016ee615fe5c01d32

                        SHA256

                        cdb7e632101970abcfeabf251a450e59142e8c627bad83b835ace0626806e5fd

                        SHA512

                        d6760f48f4f1992dfbc35b84f7c0ace035848d6bbcbe2801ce7297f74368eff929ef7339f3513b3e192771d6ae7c14a80dffe856c29f7560b79a53f87a658718

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        507e045e33b65e8708684f9d447e4444

                        SHA1

                        a80a62ac2dfaea5dd6cd7572f3029635bdb5fde4

                        SHA256

                        d58348b84b879de28181f2c30683a24dcc8785111b7351c267857d21c83c4f9b

                        SHA512

                        851dae61bfd4199b46f2c686a83fcf0300f249475e5c6035da4bdb72c22a9cd7243d214d04f91f57646b3bcf2afe68818fcad46845d5a074a0f70a00e2079d17

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        799a40b17835a5d5a4ad197aaf975be3

                        SHA1

                        d7f77faf51d647a063475f3cac36ab208cca8eb1

                        SHA256

                        ace892338497d350910ced43a4f154632f983bdd3c29d7496b4cce3b587e65a7

                        SHA512

                        54086eb7cb4f7e93fa9183754496c5988b949760368ee345be7bfe207418ff5092ab0f6c24893e5a53b6fc5d3b2ed1e13d9a0b7f23377889e9521fdb009c0807

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        96912694ee9c0232496499bc4a52bc0f

                        SHA1

                        47483acb8d4a2b6a61f08a132f4b86da7e7d7826

                        SHA256

                        057dc4601f02506b645cae6f52e725dfed05762e1cdcd439ff51f3cbaf6fa4b8

                        SHA512

                        295c8235be67b7a042cea6cf39d580c012246d03681a8aff1f8930b5693ac9c1b0d3fa552bce40f73438a5b4142ed54de92004d8404f2220cc855594b3f82383

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        800c8504a6039929aac6b66002773d27

                        SHA1

                        a5db52fd833716f3b78a46d34ae3a018ff17585c

                        SHA256

                        872b5629913e1b46a59426d600315b22adcc234856bc1172fdb48d01aad0e864

                        SHA512

                        4f498b843016c6cca260f41698fdc5d87bfacf9aa3743c532bd87974a96a8b512a88c929ebf380090e8ec81e4509e28346f49e37e971b0782542147c6180f636

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        84a7b78df0474cc8dcb9ca095e3e2cd9

                        SHA1

                        84f11a550884b5f3e20842b029e1911b104283e4

                        SHA256

                        1d48ffd66553a53ec880f1952d3bf6455a97a072acde0e0c4f635a270e314148

                        SHA512

                        946930732851337fb819be0df199aee3652cca03a9473008256693e9766909c3ff8b126f1ae596ef9c25deba0231fd5d399ec7313069fef3ce3b508b6d9e8231

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        211715ad683bc231fdb3774826f6c5c4

                        SHA1

                        5c53b5c4f0d8b88b3d02e17275857c1e07801248

                        SHA256

                        0c4061872f075dd4a9ae99e236ee8c0c0febd4692c842fc4be2d501c89926608

                        SHA512

                        861a63e4b89da6583f0cd14eb84c37b2f976411795e0c40f622becbe550b3fa271824ba93e577c722dd18d6511a0c5cc6ecf18513c59cd5b493be29ce51036f3

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        b3ecb2083937bac2be1956c896b915f3

                        SHA1

                        8be048c03b3439819012a7740f700800913205f7

                        SHA256

                        de0fa829ca7803a7dba2a7b2116769dac9e3d8a0a889e341a1e67125f7915771

                        SHA512

                        2b0623c0eebb5364a39cf476901565f935e756544111462a895414370c060b17100b84dfcae1b60209c390aebc7e4f13895521387fbbefe812b4dae63d31c280

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                        Filesize

                        99KB

                        MD5

                        5c48df48c43e51c7b15a78e73c5d4947

                        SHA1

                        316ecdf8475f9ed65b7e069b7935c3f4ed83b78c

                        SHA256

                        4f1642c0608e38988b8bc204377755f22c241f53215756b4dcf6c4c58ca34579

                        SHA512

                        9cf3c10946d372d28bd2d76f47f8b5a7b5c0b1af3b3d24134a7878d0f508c04d54141bb21a65fa81a13154921732ae1ff01b76f5c0b3a02f22a9e81200c5cec5

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                        Filesize

                        99KB

                        MD5

                        5c302e4357dbe729b43c4281cb57b6b8

                        SHA1

                        87c6d3a97e84a890aeddbca17802fc8985463d4a

                        SHA256

                        a4709c74e5a1146dd217b725dddbf1b59acd1d9fbd33c1beb12a33d2f1c6808d

                        SHA512

                        780ffcec708cb0d766a08833f5bf7e6d7c3bdc639c80749309433a6f700000049530e0daaf8d1aa5bd122429ef9292a25b51b0483bd4eb0f863cf01d1fd82a95