Analysis

  • max time kernel
    66s
  • max time network
    67s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    04/10/2024, 06:56

General

  • Target

    https://jenny-mod.info/

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 1 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 39 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://jenny-mod.info/
    1⤵
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3312
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff901bdcc40,0x7ff901bdcc4c,0x7ff901bdcc58
      2⤵
        PID:756
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1864,i,4481344787142408046,6758793039480960576,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=1860 /prefetch:2
        2⤵
          PID:2536
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1432,i,4481344787142408046,6758793039480960576,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=2136 /prefetch:3
          2⤵
            PID:2612
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2196,i,4481344787142408046,6758793039480960576,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=2208 /prefetch:8
            2⤵
              PID:900
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3116,i,4481344787142408046,6758793039480960576,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3128 /prefetch:1
              2⤵
                PID:3216
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3132,i,4481344787142408046,6758793039480960576,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=3168 /prefetch:1
                2⤵
                  PID:1072
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=1564,i,4481344787142408046,6758793039480960576,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4452 /prefetch:1
                  2⤵
                    PID:4536
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4788,i,4481344787142408046,6758793039480960576,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=4796 /prefetch:8
                    2⤵
                      PID:3148
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4372,i,4481344787142408046,6758793039480960576,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=5332 /prefetch:8
                      2⤵
                      • NTFS ADS
                      PID:3472
                    • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                      "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\Jenny-mod-.jar"
                      2⤵
                        PID:4640
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4796,i,4481344787142408046,6758793039480960576,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=5056 /prefetch:8
                        2⤵
                          PID:2796
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5308,i,4481344787142408046,6758793039480960576,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=5116 /prefetch:8
                          2⤵
                            PID:2020
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5020,i,4481344787142408046,6758793039480960576,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=5344 /prefetch:1
                            2⤵
                              PID:328
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5500,i,4481344787142408046,6758793039480960576,262144 --variations-seed-version=20240802-050153.822000 --mojo-platform-channel-handle=5668 /prefetch:1
                              2⤵
                                PID:1700
                            • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                              "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                              1⤵
                                PID:1436
                              • C:\Windows\system32\svchost.exe
                                C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                1⤵
                                  PID:4020
                                • C:\Windows\System32\rundll32.exe
                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                  1⤵
                                    PID:3132
                                  • C:\Program Files\Java\jre-1.8\bin\javaw.exe
                                    "C:\Program Files\Java\jre-1.8\bin\javaw.exe" -jar "C:\Users\Admin\Downloads\Jenny-mod-.jar"
                                    1⤵
                                      PID:3468

                                    Network

                                    MITRE ATT&CK Enterprise v15

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                                      Filesize

                                      649B

                                      MD5

                                      a3197fe30958c5b6f5b3a8755b5db94e

                                      SHA1

                                      34696f973e58a33e1ffbf4772645ff26bca5c0f3

                                      SHA256

                                      6499c509f4218e0c75c3f5973eb25f264df8fb810cd309cf7571a8eb74e93e92

                                      SHA512

                                      c43d9e94e76977b5c64ae9f4f073d64d6ef7c1e844f0c5cd73c353568a07c71984fd1bfaf0a3d95107a7f603e403a3a02ff09d59e1c9b0aa3018bcc7a2ec98d9

                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                      Filesize

                                      720B

                                      MD5

                                      4f1be4ed6dddb62edca32eecfb9e2a45

                                      SHA1

                                      b2caef8b5994a44e225ecd979f93f3e70887f020

                                      SHA256

                                      612171f3bb2b1687130587774d77eff3786a20ef06d1cce3c74d28afef9995da

                                      SHA512

                                      98117d77593ab139a011bd942d9ddcd3172242b793301ff2202d0ff4f306c2c7be3b598c6ba93a9555ee385cf273ffc0799cb6727b9f23ae847fb87b86226129

                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                      Filesize

                                      624B

                                      MD5

                                      f8c9f65f4c19f541b13d5c55c1cf2010

                                      SHA1

                                      4a89f86e45ddc0c2808d1a1bbd331aff61eeff16

                                      SHA256

                                      4ffd5ec466a5e592efd9d71c768c71469b7531f1e0b44dea7670a3be727490a3

                                      SHA512

                                      25b303f2740a7686daa72d0abd1785b30054cb68af02032b338b06b56470703d972ffeea67b1d0c07bb80248d3dfe70a1cbd0904111927f0b4ada2b765cfeef5

                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                      Filesize

                                      2B

                                      MD5

                                      d751713988987e9331980363e24189ce

                                      SHA1

                                      97d170e1550eee4afc0af065b78cda302a97674c

                                      SHA256

                                      4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                      SHA512

                                      b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                      Filesize

                                      685B

                                      MD5

                                      b1358a836603e26e596adc1899970d2c

                                      SHA1

                                      f537831da0c8a55440ea391271601daf0e4bf9f7

                                      SHA256

                                      308006f32280489f3b73cc7f01fb06c1935cc982ba159468b6ea97b7bf8bbbcf

                                      SHA512

                                      9cd4a332fc7cec783a5fe22406ba2bc1dc349baa62a1ad37d47e309ebf2a99724a02f58b3fc660a64405589c52f710c358da3ad281560e8e6140ee9ca41430d3

                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                      Filesize

                                      9KB

                                      MD5

                                      e3e9381429c809161c68fbd250b025ee

                                      SHA1

                                      a72f2f99c96706ba5d45c00c46f8d7182eacfbfe

                                      SHA256

                                      95853d4b444b182737007525c19aeafd090622b7d839c0fc4bc7f26e8bc693be

                                      SHA512

                                      2bf6b98fd54feae913bc78cbf5f7a323e580031619a226f9cabde4b5eeb991c8dbeb0a53e81654174a7dfb094f74bce98f5616810d352cfea465960ba4b619aa

                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                      Filesize

                                      9KB

                                      MD5

                                      ff73ddbcee88c42d96fef52254ac8b7c

                                      SHA1

                                      1df9c35f5c7ed1a2963ec4f90ba198b89c8f767e

                                      SHA256

                                      9df5ed2bd3f9e065cb8bc50c2abb14ce521fd3cb00159c56b2ec218fb5506135

                                      SHA512

                                      487b26f9c036821721c9b3acde14b98af963fc3bce368332de8b27eb7c0ecd9e0459a6b5a1945314467c14ec57d1d0d4497d99871a5dae7d28e308aeff64c965

                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                      Filesize

                                      9KB

                                      MD5

                                      c935894f8a251c21e016b7cad0adaa97

                                      SHA1

                                      1618d9ef1a200aba7a362c70a35403d126c92fde

                                      SHA256

                                      37082b863d785a2c8c0a479048cfa44904493aef6bd98c1c5658ac02fbe37c5a

                                      SHA512

                                      6fff3d703c9e879edb482b3944e15f80268111b0081a126e214383e173c8b98f61d0164b283303fe5a2a6c9f2c5d6e16b734e7b572ec059d013f475e5959e7da

                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                      Filesize

                                      9KB

                                      MD5

                                      dd0ccbf6be0ed670a51270ebdc0a2adf

                                      SHA1

                                      c7488d3e0deaae25d9769c123cd4245c852bae0e

                                      SHA256

                                      8361bf79b007abad6a9f099acdba420504b10ea8605c682709bbbeb4ee0d3462

                                      SHA512

                                      0f0c514971f4a5120d0b8b864bc334546929f5acf44eb41937538a94b5a9cfc0bf08a26f266c2d5dbfb0d78f14200c1e60f8c9a12c2fed36ea998e987001981c

                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                      Filesize

                                      101KB

                                      MD5

                                      abe78bb33cf58e514bea9f8c3d9a97f1

                                      SHA1

                                      8be602362d6ed4fb0267f54f815d98c371b1a21d

                                      SHA256

                                      9b0809e3ef206885e4baffbf1f7cf7d092763b1c8d773fe0d5f264e2fa4875ee

                                      SHA512

                                      8066b3f3a51bea0774efe78e746bc35f526bfcd3011e87c2deb48ce2a6216d95eec9f4c56b85b7f2c5001a88afda168a242d9e84116b2a72b05d1009abaec876

                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                      Filesize

                                      101KB

                                      MD5

                                      c546547b46f37eba8e7e7927f1053fe1

                                      SHA1

                                      ed54747edcb51a04326f5dc79314e6798cbae550

                                      SHA256

                                      14fe2e7773ec56a7ea3ff16ea0d316cb0f7c795c959401f2229d1cb98a7176be

                                      SHA512

                                      e23d68e83756dc05646c9deab48239fdd45cf6f6a73fb4601813cf9cc0104e5c34b892c1bc94c85b33485605777c079a5c196509da7c829cb144f0b7a20a1673

                                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                      Filesize

                                      101KB

                                      MD5

                                      de982408852a6e4402af401af15e5d80

                                      SHA1

                                      3a2bfa645098830aa6dda5eaf1204cb162b8a2ef

                                      SHA256

                                      dfac764eb6f29f5b0820832e51850726a3642dc6e6a8068044e384cdbd7f8d1d

                                      SHA512

                                      522f542a227aaa584fa47cf049cc9260c67632fe1d182ee819916ee72565dc3253a0876bd6b1485a8a218736d1c286baad3b3830e3acc0152c77f5a09c5f88ee

                                    • C:\Users\Admin\Downloads\Jenny-mod-.jar

                                      Filesize

                                      26.4MB

                                      MD5

                                      084cbe7d0bc8c6ee5e50cc5ea95365f3

                                      SHA1

                                      c7bfffeae436fe7d3f3dbd3835f3d746120188e2

                                      SHA256

                                      c1c712c7c6efe3deea3323359b1d55b0eb03d214ac9df5d39cfa34fa719c73bc

                                      SHA512

                                      2e1ef2915567d74435fc8b72b024604ab5f8bf9cc3191729ed7371445e8e72b794d64dcd63bbb7bf81649c702f092dab37f4a5b3cbaa6b79bed1ccdbeb1a823e

                                    • C:\Users\Admin\Downloads\Jenny-mod-.jar:Zone.Identifier

                                      Filesize

                                      26B

                                      MD5

                                      fbccf14d504b7b2dbcb5a5bda75bd93b

                                      SHA1

                                      d59fc84cdd5217c6cf74785703655f78da6b582b

                                      SHA256

                                      eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

                                      SHA512

                                      aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

                                    • memory/3468-182-0x000002D076E90000-0x000002D076E91000-memory.dmp

                                      Filesize

                                      4KB

                                    • memory/4640-156-0x000001CC2E420000-0x000001CC2E690000-memory.dmp

                                      Filesize

                                      2.4MB

                                    • memory/4640-155-0x000001CC2CC50000-0x000001CC2CC51000-memory.dmp

                                      Filesize

                                      4KB

                                    • memory/4640-144-0x000001CC2E420000-0x000001CC2E690000-memory.dmp

                                      Filesize

                                      2.4MB