Analysis

  • max time kernel
    600s
  • max time network
    485s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/11/2024, 06:19

General

  • Target

    https://us.securityhub365.com/

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://us.securityhub365.com/
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff874cacc40,0x7ff874cacc4c,0x7ff874cacc58
      2⤵
        PID:2332
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1872,i,9607483620992155303,13414019224918735282,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1832 /prefetch:2
        2⤵
          PID:4748
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2144,i,9607483620992155303,13414019224918735282,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2152 /prefetch:3
          2⤵
            PID:4940
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2224,i,9607483620992155303,13414019224918735282,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2556 /prefetch:8
            2⤵
              PID:3788
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3092,i,9607483620992155303,13414019224918735282,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3128 /prefetch:1
              2⤵
                PID:2116
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3120,i,9607483620992155303,13414019224918735282,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3164 /prefetch:1
                2⤵
                  PID:2368
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4492,i,9607483620992155303,13414019224918735282,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4648 /prefetch:8
                  2⤵
                    PID:1848
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=728,i,9607483620992155303,13414019224918735282,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4796 /prefetch:8
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    PID:3112
                • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                  "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                  1⤵
                    PID:4076
                  • C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                    1⤵
                      PID:4232

                    Network

                    MITRE ATT&CK Enterprise v15

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                      Filesize

                      649B

                      MD5

                      0284d4fe2f8b1085a83ba5327edf26f7

                      SHA1

                      efccb0fb77519295a9a51d7dad7b4c10e5196405

                      SHA256

                      c35e56068b052395491d139414c6661c3268cafcbb5dc0fb7ab0b9657320107f

                      SHA512

                      d2f77dbd93cc58a2c2016d122ed6ba9ba5e2b594e77c79f34576820fad364869bd2f0f3b82367fa6dafa933117c65ec497d52c8965bb9aef20b3e7af88b2b098

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                      Filesize

                      216B

                      MD5

                      9eeadde4c56da57b707183fbe364ea16

                      SHA1

                      c56ee641ddfda05d7a0d54160b9978f9b2ea945b

                      SHA256

                      4c35b5cbf6de7d627e4b4effbf0b3ef29993e906815e51fc618015aaba02cd68

                      SHA512

                      d7c7d6ee551d9cd801f9f7e08c89301631a41a083260d3f1aa478bbcacf9670b4395e9d6f66d62bb7848e31721069bebd7e900ae95f9b2b92a515b9cb403749a

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                      Filesize

                      1KB

                      MD5

                      1b3a59c72c089e4514d864c1a904322d

                      SHA1

                      86a95fa3e4baee2c0c489608dce0267b87d1f67b

                      SHA256

                      de4d088df90250edb32307d34022808221bca047367f561de54e2262a5b3e1f0

                      SHA512

                      dd57244bbb6216db57207762b4b71a89afa46e978610a0666afb504da0cef0ab490dedbde091680ac5b31d5848efa75fece6ff58383cff83b1ce9ed5f20af7cf

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                      Filesize

                      2B

                      MD5

                      d751713988987e9331980363e24189ce

                      SHA1

                      97d170e1550eee4afc0af065b78cda302a97674c

                      SHA256

                      4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                      SHA512

                      b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      6176b7df33bd72b6b5327609b0715655

                      SHA1

                      40745da17dd3cf07809a31b3559a9b32541c9ae7

                      SHA256

                      6649d1707e9f10a1164fe443b7ddd02635179005da25d1687254d7ebcc3f86b8

                      SHA512

                      1759a15a79d9f943f67bbf19747a1dea54745dff589acc3dd8f1c5425fe2c9cad8124a0ccfb86a777c946007706e24f7d617b3b6a4069889326831fa33eb1182

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      7887676c092e2b7a526cdd73d467d250

                      SHA1

                      336094c19f7c39a40fa5f02e02daf3b95313d0fa

                      SHA256

                      82a1a6df9d013aafbb986d930ab52a18b8492ad5fe13d930ef3627910d691f22

                      SHA512

                      037e6f2aeb99fb5e5e91f13326abc9eabbf542cfb006ba1bdb7f5129232d7ed3fbc95cb5f02ba3867c2fd638cdf704a44b75f063d7afa60d673b124b2474d799

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      5cccf2520f97f8f821a94cb30892cea6

                      SHA1

                      96f94d2a0899d636dc71a03625321d6d47d3d490

                      SHA256

                      782c53671f59ecee98df3508ff3bd739763addd15a28f01db837fcf0b914a80d

                      SHA512

                      6fb48f2c52982049a33729f73686bcce24939769464dc077fa9e76a8142b2d93e5a37bc612f4309f8488fb057ff79afa15b660a99695e03c8bc2f0ca9e9704e9

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      13ebb6d2d77d6503248e0de16fd75ee5

                      SHA1

                      a195d5faa85913149cd9b11c082d583bdff8fb58

                      SHA256

                      39a0371c598a4a2cf90cd2c68d4ccff3fdeee9124decccda8304789afed29e68

                      SHA512

                      6666caa71f31e9f820c2ec8e220964aee559d0411c77cdb3c52bd9df44ef409ba45e5b91ef73ba36c68b9ef7c9c70de2ed6e9bce4320b1d54fc639a8e0d982cb

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      b4d8a409cefc35bc75b408894837e43b

                      SHA1

                      23fa3ffe3535b477d25f03e2724995066b526d58

                      SHA256

                      e502d0ef409acbeb8f0802321886688305acfee8d150b83f056050a3962084f0

                      SHA512

                      5d93419fa035ef16089254642b9800573f42d902f8c7ee02c5aa0bd284edb8ba15240bb298ddc085c46df2bb9f8e48b20ac456b3b17e3bd98c764603c7212b54

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      a89c4c2f1e4003c4dfae575aa5dfed8e

                      SHA1

                      a6c613baf1c8a869534c7ceac7f1550a2d7bb974

                      SHA256

                      3128b0918fe0fd991277d84883a55e6b1ec94f6d453b9d9688851ff35a65ea0e

                      SHA512

                      48659d98de483419626c1abfdc25f1bf2e77c2f12364a97c4634cb582e7cc561073b5d6477574b4201dfe2a0925ffaa885455f07fd4ce7f0df04477bf0509406

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      9800831b19e4b758ca00f2492eb1cbdd

                      SHA1

                      69ef47e46d5d793b0baab2118a417b5bdd1ac1f2

                      SHA256

                      787f6e47092d1e4f9dc454403ed5141bad3e54e738220d9c834f3642124d1944

                      SHA512

                      5ce6e332118ce244fd77909cba36684aa496baec5be0003bd9eba5c63e358aa2dd17844592ba25a28f9bafb53b18abed345cbd8a98c421d339c012e2db9d3286

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      3cb141cc283b48333cf023078cb51f99

                      SHA1

                      f3149ddc63c1d19af6da87678c129363ea20ce5b

                      SHA256

                      1747a7911c81877085876a072778b11b1dc683401465a7dacfb15f5da3ec8d12

                      SHA512

                      27e45f949b52d01972aa837cdd4830a391b4797414df2a53fc601f517227099f77af7c56e9a90d5acee5e2a5ff8c52a69a87fd81f7b5e3718d17003243556e1b

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      4532fb85e035b44d066c5760ff8da466

                      SHA1

                      8d42a398c56b44b9e1d5e4fd1327b500cdf8491d

                      SHA256

                      c067b7e17153918df748f6bd7f15f65525fd674d45c980d90e98275f16973a24

                      SHA512

                      bc08dba7efbe4c1338c1318a2bfca05cecf9753cc261ed90f079e24244ec6338cd388fa93ec87a3cfc69077ce04494ade4687a43d4bdb21aaae59544f82438ee

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      17c02e0779f5ae0b8ada382db3bcfcd1

                      SHA1

                      9fa201bc86aac5d61cb2afd3f6c00c931922547f

                      SHA256

                      3b71abba7fc3d9f895309eca136093bbdeb02861ce33ebc3037c7c41088f0683

                      SHA512

                      2dd4c52ad36f55a360622dfe4d7625f3e3d7472ad1fe7ea851ccd18c6becf83441ad96e0fdab8e8dfdd8e9137c66f1928052c1afc755145e6c01f9ae4104d902

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      bdae30b667c2054a30c37028e2ef4389

                      SHA1

                      705e0be563e0e7cb8b0fe9df88bf86bffee26307

                      SHA256

                      909bcc2fd74252c662b9d19cd9ec62b69efc22b3ce09495e991824c79a5cafec

                      SHA512

                      5e30d744e97f868ce5e0b67d98356c19cb7727999cf4c48ab5705344248c42a54169196b05dd035ea1889eaf593a45356303cbb3b3ca15d7eb42f3072a861b28

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      7d9753720c39504f859de4c416dd2a84

                      SHA1

                      a3349e79219b1970fff50c9474c45c29a9001702

                      SHA256

                      1165fc2d5bd7421fe8ff75e165767c52dbb77e1d8114b133ab3cdfa5e399e411

                      SHA512

                      f464951e65f0e955749e3161d40058e7eeb7751b15e2d8aaaf5b1ba8b97de4c5a92f53f54b711576d844ebb74676759592467c8e5e566cd6dbddc543ad63a154

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      7fcd403c70634441e054220455dec989

                      SHA1

                      4a8daa40231ad2269df2bd2210209a491391d633

                      SHA256

                      d4dafd4171267edcf32b8ed450dd98a1fa367dc9c33e4c7a79684f151fc75119

                      SHA512

                      17b7dee626220288fbfde7331126bd889e362c4429edc2b7c0fa05a721dea7f7c377bfdad4710f71325350a952353e77b70ac870d1c47d50e62befcc71d16d4b

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      d1e405ae1821562dd2fbbb88dcb66115

                      SHA1

                      72eca9538fdf1af1d41fe40da07fe3b082fc759e

                      SHA256

                      34081e3d5f7a6ab969ce938f4ca8e150452aed7c0942e18ab5e68062e168191d

                      SHA512

                      be31dfa04ba7b81202761158b69af3c6007aef3f2f201f0ae80e1be4c39e587b7f10cb2bb8fc4a728803b27ff3c7bda9b37ec683849090c475a51f4765fe57dd

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      46f42af1c8f6c0539c1ef593794f0e65

                      SHA1

                      3d4fdcc62fe00ca60dcf6809bc9a31b4b67ecf47

                      SHA256

                      b95b24e32261ee88a19dcca7cc0c552a07e9c183dea21b2927fbe275dcd59bdc

                      SHA512

                      77189a870579ede99f99f97449f866bb46af3645f6256a1fb48e3feed91207d8eda620ce605dd20527af8bd4d1c3fcd9285f9759b7eb03b1e3fdb9bda0e0a2d6

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      b3c9f58dbc2e9db3aa57407b3eed868b

                      SHA1

                      7d0611e04b5f0c4a55143c763a635f2ccf89dc02

                      SHA256

                      6bafcc0fc33524c3692d8ce7ef74da7720eb6d467cf8a44a5af578fb84bbec2c

                      SHA512

                      6ee391e1b26a598c30f4867ecbb82a4ffbb97ddea8ae85c75c92d4906bebb2f4be006534ee7b41840d3cc8aeffc8685909890f6eb1083830fc9ab9ddef5da251

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      26d2e4765266113edf6f0c1898420741

                      SHA1

                      5bcf782ad8d06117640fde372abcef02f0cd267c

                      SHA256

                      e0cb59e48aaf9df6c1f8085052f4ec0bfb53f475c42670b1915aa1515aa2fff0

                      SHA512

                      458cc041df437713e0c009b6e1c57424b4e0b01a57d7c25276450c67f4567aa8d168bdc13490a598e2b430b3f503d975083c209af8076bfeadbf3bdf33327bb2

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      b8ac4b0713510419ca07dbf9ef16454f

                      SHA1

                      2b4682b27a869c6c3a74349d331fdd25ea354af5

                      SHA256

                      cda0e305349a1dac2ea57d041651f49c9a21b9494787d6eedefa0e051e8935be

                      SHA512

                      6dc782200ac8c638c46c2b4be55f08f73bcfd3d7cf38552d02482b9f4c196480ece91b04a925c299702287b4b591e19e2536fe5b50e4747389aed3a89b63fa63

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      9224e495e0585da869a01bf4c90bae6f

                      SHA1

                      8444bbc02873a66bb9c16136deb305ba7cc2aaec

                      SHA256

                      fad6132e750063a749af08410e466dd5266527a5973a25139f7ee27c008ad86c

                      SHA512

                      d4e5a43223d0b7060f9ca5ed3f0f4a7dd0f3496d168eaa8b664b50c434b94b25226286ec0579dafe83b98dca49f3109acacf17728587234740375edb8b92b15e

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                      Filesize

                      9KB

                      MD5

                      82f9894a53f98f0dcf3cab01c5ef693a

                      SHA1

                      ae5d12b6009f42df2402f800b15e05e5571bf6b6

                      SHA256

                      3ab52868a89f74a985557b9994e09045626f1c80b59985008c111ec8bfff2dcb

                      SHA512

                      41a3d2e56b81a3488491cf86256d2852713aabc09bab706abec6cee448d4e9ca17aa19a2e6cfc74f013441de920e7eb1d246102bcce9c49a2fbbe3c8db0ca516

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                      Filesize

                      116KB

                      MD5

                      e1f58d535a1d9c63936e86d8ab225880

                      SHA1

                      96a4ffa9bff575bc0295f8ff596892077d6642a3

                      SHA256

                      910db7483f5e218504c3f0e6346b0a27a13ae712047c3de5bd1edb0b86ffc9e9

                      SHA512

                      f244de57fd1520a7c2c4ce8eb3f4b0d09cf04bdaa4615033211038bb29770255edc68630356a393c7cccb40e11339ce94660b4a6e5186e00dd8bffa42944d195

                    • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                      Filesize

                      116KB

                      MD5

                      d1039d889840988d3c12a2568d491003

                      SHA1

                      c7a81672a0faa03dcf2463f13a92f4c5a27744b3

                      SHA256

                      a1720fda4e896faf186e370435770f13f52a835088e278ffd2a5ebaf0554575b

                      SHA512

                      73d7778b5aab5a033089f0cb51a09d796fb4a5c3b1b9931fa2ae99af04fab9192d93df33f4ad47aa04cecd9b66c979df8f6f9e2b88279572d25a7820a6f77d3e