Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/10/2024, 17:07

General

  • Target

    https://www.hackerrank.com/challenges/python-loops?h_r=next-challenge&h_v=zen

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.hackerrank.com/challenges/python-loops?h_r=next-challenge&h_v=zen
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4216
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fff7649cc40,0x7fff7649cc4c,0x7fff7649cc58
      2⤵
        PID:1796
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1940,i,1097275463528842088,9949120231065418172,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1932 /prefetch:2
        2⤵
          PID:3660
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1996,i,1097275463528842088,9949120231065418172,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2056 /prefetch:3
          2⤵
            PID:2652
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2288,i,1097275463528842088,9949120231065418172,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2240 /prefetch:8
            2⤵
              PID:2040
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3148,i,1097275463528842088,9949120231065418172,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3176 /prefetch:1
              2⤵
                PID:3452
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3164,i,1097275463528842088,9949120231065418172,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3344 /prefetch:1
                2⤵
                  PID:1768
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4484,i,1097275463528842088,9949120231065418172,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4596 /prefetch:8
                  2⤵
                    PID:2908
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1000,i,1097275463528842088,9949120231065418172,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4808 /prefetch:8
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    PID:1008
                • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                  "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                  1⤵
                    PID:1804
                  • C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                    1⤵
                      PID:3004

                    Network

                          MITRE ATT&CK Enterprise v15

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a

                            Filesize

                            571KB

                            MD5

                            c2d4f45b4008f9a0353ac1c896f6c345

                            SHA1

                            f80a7d64bc610640957f2e33a113d937f3672049

                            SHA256

                            2fe571bd572bf19fc007adae17ab0f3052fac4c75b5a5b2689b0a7c7db024932

                            SHA512

                            a22411da3d8a2994ba48a05dca4c81ece97cb6021a0eebb1a5c4af7a87f007e722a331b9f43e35a94c18746d6bc3c0051824bb103372bc1162e77fb0abfa5515

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                            Filesize

                            1KB

                            MD5

                            312d96bcb6e1de0c354e04798462cd65

                            SHA1

                            bd9acb628112af8dbb59d12aa97025c04ad5177c

                            SHA256

                            7c21432fc11ed19ee3e41b3b7d16e4bdae0c246dc2ab02528782f0ef52620e17

                            SHA512

                            76d0751c3b9319dcc794d9cf4cf8beb98a22df5234799c77009a49d8c4b3a906c08ad0097638da907cc62253f16621c8a3071dc34f7c68e611550252de1604bf

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            2KB

                            MD5

                            651d090ee62c2943ad8a2bfd7c839dfa

                            SHA1

                            ad1a6a51cfcf575f0eb64b0c3fee67b27d304427

                            SHA256

                            fd650a55c4eb50bbe748d54214b2991dbc49ad6088a6fa58503337217c57dd36

                            SHA512

                            f1b42e3a8c550f9b66c39b775cf2ed549f0e7c0f92d438f81bc7a57573ea58d2e11a43cc2378e91a476515818e5b8d0d865b24bba0bfdd8676b2b02d65105244

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            4KB

                            MD5

                            7aec371a92d1a32b172dcd3b30004e1f

                            SHA1

                            7a85ae8537fced78aa061fef4dfc86c825660d5d

                            SHA256

                            c60ece7222ba6e761b6d2eb1d8ed07bccfb898cfaaed3022a6d30b40b7892337

                            SHA512

                            62cc8b92f535ed9b4063093530967e3b394a999c49e6f2af794e7a60473174ae5c9444c62a37130c60f2c0365b4d9b4da8569336d076c7b81afb3e4430675467

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                            Filesize

                            2B

                            MD5

                            d751713988987e9331980363e24189ce

                            SHA1

                            97d170e1550eee4afc0af065b78cda302a97674c

                            SHA256

                            4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                            SHA512

                            b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                            Filesize

                            1KB

                            MD5

                            00bc481120c7ee32a7e9b8eee5a3bdcd

                            SHA1

                            3e8878f4f7546cc07c2d11a941df0b9b2b970047

                            SHA256

                            8ed667c1eca7398ad3d3a235a108593d5611c14f2689240dab5b66f477e70e0e

                            SHA512

                            25f920fa3fede0fcede5a7f0cc9ba34646a15c315ef758898b14fd64a142fff12e34d1b223239484703da750d792f7ca7aab0c1678186ebd25cc24e265e58676

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            8KB

                            MD5

                            7cd460eb6cf1219c108f67f0f96519a3

                            SHA1

                            4a5694be4cda5bb554f23ec3a6517ecaf5d060a9

                            SHA256

                            5c28c333ef57b3b4afebc392db3e9bd88f28dfa2bdd56338ac3e925066655264

                            SHA512

                            db660ed3e1867250ee50e17b2c6b3081a5b2fd5e0c86e64b8b7d469a60f61b92049e03f27749c2e7944faa052dca584f852122ace8ab18ef6e33c463079caa5d

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            9KB

                            MD5

                            1ac6ac02665d04b1f5a8582570c65a16

                            SHA1

                            3111152919f99832c7672e708932fc9f465582b4

                            SHA256

                            e901a7cf1a29084028f767a085bf7386f94e4afed59eb8320920ff0d173ad93b

                            SHA512

                            b320e3dacbd04849d84b77e7f8e29d12f408b10d62a9196d7b7bbd630aa21b84068e52e556f9627f70c15679782a57afa1175d735a5f847becf5aa2bbf794da9

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            9KB

                            MD5

                            d2963bcde7b9e387115ee0072de5d0ee

                            SHA1

                            1ce1ed2d31ca2ea44e832e4a6bc0d35fd4c8494b

                            SHA256

                            129051ea77bf44adf91c70f6a8bc2eae7d3a55f2a133d7e4bd0eca3dcce49f30

                            SHA512

                            519ea0faff5c1d6c60211b9c475d3edebc68dc603d29d17a42e444b2a92b48e1735141229ba45d0caad3c204daf950319a0b009b8d0966955158a4ca0e8139b5

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            9KB

                            MD5

                            1ce276a435024fd65c5a3154e366f8fd

                            SHA1

                            a3ee12486eddc1662f9a5429aa3da0cfc4c895f7

                            SHA256

                            013b3421ca79aa3102aaaea510f8530328b076b287ec89d3c679051e1a55bbcd

                            SHA512

                            8dda43f7b986773e74d4255cb4a8fa82ee56e1f0a7d47f1a754e3a8f4506cbe4943cd32ead2c23507e7f0c30780bb303a9eab3052b6b75e7322e8c924af960f6

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            8KB

                            MD5

                            1e66f3096ad341adb2103a9516d3b220

                            SHA1

                            a3464370656fb32d906386916bbbc2d9f42473d4

                            SHA256

                            e308ede5d7f90d6cca4f5ffb22d8937085f63888c909d6f71caca523dc418c8d

                            SHA512

                            964c48fca93a03251fe0ecd1b0b70c0c305b9bd7323f736002cef670e73eb3252d22b07d4b969503b5089a8ee0914c9666ec90188f9dec0df56afb5b81fe45e4

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            9KB

                            MD5

                            4f0032b0a77bb4b1465631232f100a33

                            SHA1

                            492edb2e0d83d36c20431cba33af484bd64360c3

                            SHA256

                            6307b0dedd043b6f46bc6128532834327e99d38cb0f88e5714e87615c948517c

                            SHA512

                            9332f5ab343f910ae838546e901e4b595e3a44fc5f7e5580dca9f3827dcf1c2d93f12047e184f1a65253484ced77669284325b047fd011991a710e8ff2566e07

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            8KB

                            MD5

                            db018076cd1a04e716c54fed57fcb97f

                            SHA1

                            0605f0c9b6ea3ef0c884e06063c7711acd04a5b8

                            SHA256

                            1c033ed39887148c23546653925dee2220c38a26e70315e0c0d47c2cdbd2e077

                            SHA512

                            2c331bc2b9107168dd49c5f26a356ed130b0264962c85a3a906a3195b44c241dea47b39a13bc302b3a2e80c1a91d44cc4144db20921d103ec301182e21bfe483

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            8KB

                            MD5

                            82d377c57fbc5813bce4362cd52eae90

                            SHA1

                            592231c153f1219531984fde81c57fc5937fc05f

                            SHA256

                            f8cd37a01f0d3df20ef5beb8a80828d821d1917d0108027369acaf19e4d9907a

                            SHA512

                            b8ef40e590598ea1f3c1d4868d771d24b6da50e7009beea7fc82552eb8d46c623a72302d8b641d30d8a85225900c98312d8e311d26f9b2dd077d248b5ed8246f

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            9KB

                            MD5

                            4291409a786fb789e5dc50e2b9e702f4

                            SHA1

                            deb71854cbffd65293d1fb97c64d04be0a95d92d

                            SHA256

                            09f26cb3cd890045157384e3de697464e65d5a808e19bb4770a724ae448926ab

                            SHA512

                            8b81d6caf5b43559144dac4ec14a68009d6385d8a4ecf51e11fa4257d18554af89f4f9233411d62db3c8637777c79772e2463ab66123ef14e4ac412ebe247548

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            116KB

                            MD5

                            f83e4fb591bd14d3f681f7d8c9258551

                            SHA1

                            33f234f515e5d5decf7c4b0fe706cc4a0690506d

                            SHA256

                            688cdf6a08b1e75c8363f88808edd3f7f8f057ecffb4a1468b7d0fcf26b4776c

                            SHA512

                            c3ba69089737f3fb1fe5db38ed8fe3e6be412c69f6603f74b158c0c3e6d0bdf366b463c028732c3748af315a360399aa819ca18ab244ca742d56e0995387a5d3

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            116KB

                            MD5

                            cfccfad429f3b039d1caaa3ac1be98dc

                            SHA1

                            3d92393cc51f933179349e476c535eb30c9614d9

                            SHA256

                            def6bb519924e79942970fd56dab03bc278325be7be28805c16aa7a6b52e6447

                            SHA512

                            ac2f0af54e69b79df2d3504f467338f3e4fb98d1038a1873575c3808858bcdbcfb25b008a35ce7cc88038f9033b4c292bfc9d360ff7b0cad34bf64e1180a2289