Analysis

  • max time kernel
    95s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-01-2025 21:56

General

  • Target

    https://icard50.ru/50

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://icard50.ru/50
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4996
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffd8e11cc40,0x7ffd8e11cc4c,0x7ffd8e11cc58
      2⤵
        PID:528
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1944,i,14600869022949803816,1064972581712806583,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1940 /prefetch:2
        2⤵
          PID:3172
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1744,i,14600869022949803816,1064972581712806583,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2004 /prefetch:3
          2⤵
            PID:4568
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2272,i,14600869022949803816,1064972581712806583,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2448 /prefetch:8
            2⤵
              PID:3320
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3116,i,14600869022949803816,1064972581712806583,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3152 /prefetch:1
              2⤵
                PID:4700
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3124,i,14600869022949803816,1064972581712806583,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3192 /prefetch:1
                2⤵
                  PID:3828
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3788,i,14600869022949803816,1064972581712806583,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3688 /prefetch:1
                  2⤵
                    PID:2584
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4396,i,14600869022949803816,1064972581712806583,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4816 /prefetch:8
                    2⤵
                      PID:1700
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=3404,i,14600869022949803816,1064972581712806583,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3432 /prefetch:1
                      2⤵
                        PID:2976
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5036,i,14600869022949803816,1064972581712806583,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5048 /prefetch:1
                        2⤵
                          PID:1840
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3128,i,14600869022949803816,1064972581712806583,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3532 /prefetch:1
                          2⤵
                            PID:3976
                        • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                          1⤵
                            PID:3824
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                            1⤵
                              PID:4572

                            Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                              Filesize

                              649B

                              MD5

                              7b367e9943368a66286b0bb7988b7bac

                              SHA1

                              a9e15afd0b7080fbfee742ed79e79690afb63436

                              SHA256

                              61241e5eab0714380f9719aef370a6ed123bd3bf13aca95a716d72ce2c49b515

                              SHA512

                              bbc6ea8ee70999d84a712ddc55daaae039271d5c711342dfda97e173b1c87aa87cbbb66cd946f24b17b5445649f89ed93fa957371bb9432fb51841a9a520347f

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008

                              Filesize

                              215KB

                              MD5

                              d79b35ccf8e6af6714eb612714349097

                              SHA1

                              eb3ccc9ed29830df42f3fd129951cb8b791aaf98

                              SHA256

                              c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

                              SHA512

                              f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              240B

                              MD5

                              853c3eb2ab7087dd57c9f9a48ade3f3b

                              SHA1

                              9b0245a103a1028e84bfdb591114f74c260c154d

                              SHA256

                              0095701fb59d64ccc538192bbbee0462a8b6b25dd05fee3aa5b39ba0c2017877

                              SHA512

                              6332e59edf942bfd924196efd9ce627cc4a1f69d385a49882bc7cffac0d50873b9e9fba1450c031083e67c1f8b5629c67ddf0356e521d4d10a70dd2475c8bba4

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              120B

                              MD5

                              f9f06c79245412b55df9c8eb94467376

                              SHA1

                              2664410a025008c66b15c3506ec6b3d4c16d3ebf

                              SHA256

                              2df8625b70794dff7a0777e21a038f003b9afbdc34282367f12dd218c3c9459c

                              SHA512

                              77cd7aed6f587f79fdca9ab00cd4609de8e3879fe01b9408f06441124731581b1390d89c123b14a63176f07653abd8b7780b24ab51fad1344e6b2cf04328a178

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              2KB

                              MD5

                              2bfe251a9f6a07f3131d53db822cbf05

                              SHA1

                              5f97cfef5a1df367850a34abbb33d06992fb970e

                              SHA256

                              bf5344b3444e7e8177cb5f2fd00ee590c03fd8f2e43ebf2d501b902a623f2df1

                              SHA512

                              8492a4172d3e934b0d775d2acf3c2399520756d4f2f095ee072e481eba8eed2002074b5f7fdc1477cf015e45c1dca2c156d7846e72b4e97d4412133dc341726a

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                              Filesize

                              2B

                              MD5

                              d751713988987e9331980363e24189ce

                              SHA1

                              97d170e1550eee4afc0af065b78cda302a97674c

                              SHA256

                              4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                              SHA512

                              b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              523B

                              MD5

                              900fd8c6c3f8664ed1af55ed2da43bab

                              SHA1

                              0e42b0941b2702cc57357b1e65a9b33930ee53bb

                              SHA256

                              e6a300794a5faa6ceec95159d28dd888fb37dd7dc37bdfdb2395f4e025ebb19a

                              SHA512

                              739879b0362643d705c322786a46ae46185420990b53578df237e2ed12b9f049d2b641286591b19f86364effcf68635b026b86fd5d19f9da55cff2e7481be84e

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              523B

                              MD5

                              5c5953b2d42c782e4a5e5b0ed36b07db

                              SHA1

                              cf1ac6473eeca03b64cac2105c9dc2902ac6eb9b

                              SHA256

                              2c5e434b028265478604f8eea08cb07e26962e0fda003675e3661ee74645eb75

                              SHA512

                              e0a2f89e1defaf74f6c9454225607cb34230690c476d8124231dd760d4380f3c239becb77c31d514ca06790f02c93a1953311d4e6daec9e77ecc96662c367cb4

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              523B

                              MD5

                              2f3ccc31ee32e3e3eeb5d6191c08b238

                              SHA1

                              1db90417523d32e3fcb66e17e5957dae182d9981

                              SHA256

                              7533a367d31cbf0cd136f490a49541e2279bc2d77ef798ea6217022a5ae34e29

                              SHA512

                              a70c6b9163b181ddd63bcfd8dea2b66ad83161a919749918f02271c682576697e8c7f114d58ecb779bc1c296c71535a4e550b5f6c1f8018008d712ffc862cd85

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              a9e3a1882feab4b5dc2632c1f71458ce

                              SHA1

                              2a93d0b7710d8f90619c51e494aa5b546c1db97e

                              SHA256

                              7d9e0c639768dcc8b15fac14cdae4b2a5f9628933e2e15348c63ad9b4db07fed

                              SHA512

                              fa31620d2223bfcbe82a5e9d1d31650227424d453e608b02c290e8bedde42064f19aee35a9f812e4e0bc824d4e921056f64fbd66122424ca2f48866fc2ff5008

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              10KB

                              MD5

                              64bf016d75a9d4e60ccf04273edecde1

                              SHA1

                              9a6a6090fdd2a0dcd88bd928467c0da7a16c727a

                              SHA256

                              9c2d7ced011cd2126153defd97981910c54cbf0637e91635c1550d8adbf3441e

                              SHA512

                              9c56cdc90389b81e1312f0dd5bd2f6e11024004c6e6e6e19ab8a9ca6b58f93d9517acff61794bf4ea07aab8922f2bd23eabab817c30b30ba85416a5d324cda89

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              05db78e0cb355cf9308d16f74ec75457

                              SHA1

                              9d494f150d81b8929e848218c7c5339f1b30aa90

                              SHA256

                              71914bcbf1a3f00ed806c6f86bf195c1d6f7239dde61784d86a5fc1a94b2296c

                              SHA512

                              deb2b23acd9b42d9d1acba8d8180b3770e7010a3cc1a03795ce56c8850f35e20cbc3e0a792ec0634500b988a3bae28c1013de03f57e6e6341732f13dcefb0544

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              1f3c2846b45de5a80a4204df14fa31f3

                              SHA1

                              ee6125446577e1475c39836804f06671334f9697

                              SHA256

                              c2ff0a6b008a1a7416aaf64a758f37532f0f19dee168d0fd4a4b8d4d46d23663

                              SHA512

                              5076c98432a368e4b1f6ab499ea01902c32e3740eb722c0d657a235ef27b61b3e32423f22852eb5a57f11f4fcc97a998c2b9c15d849dd3562cfbf1b5f6601f44

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              44052d1b181f55a86ff0f6e34becc4c1

                              SHA1

                              f8731c268f7452579c858d18aa92857bad822292

                              SHA256

                              b5d9e7b8b8226e48b3c18fa6f8d5569fc904bf4961e9f88a3c7d7bbcf7282cac

                              SHA512

                              5155b961e27fc4c10242fe7e8db2ffe511684573d4b3847f7ef9646a9d5cfd3d7b46d900dd47c756515e02a68be37f220bf803dbfff05331feb232872b6f19da

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              86d1fe3612d67c2c0ee0191359c9dfff

                              SHA1

                              fe67d195ac7238b793a9cb0f8087ff65a995225e

                              SHA256

                              1103c1cc693d3b5eb2efc01f671bd23fdc6fe725ea8c1b36915f991357984168

                              SHA512

                              dbc0a58639e29cd148138ec1cc8bb6f74a927cca70c1211178d5eb4097e5896b7e5822c54927075a7c2301f57615fab817e13c6988feb89f916a5583c406db51

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              116KB

                              MD5

                              6cf12d2aaa0e73a415920547fad76a59

                              SHA1

                              64f033f6a063a76f24507a7009672ea0bfa68257

                              SHA256

                              d8e0185d59d44aef5902c3b4f2900024cb1f6a08a1fd247a63a2b3ad2f3eb6c0

                              SHA512

                              f83071fd505c2d6b0a79d932adb2ee8ff335a2f2b2e2211059a5c5223023b341b714283ad95c686a3d5574b2a8d4d897e1770866d188b4fe5b34cba3d7269cea

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              116KB

                              MD5

                              9f184c1939fd43703a89d230fcb2e643

                              SHA1

                              842ae2826b306e4a3fa5c9d2077b76e798ec4e56

                              SHA256

                              4214073e2154acce0565bb0eb564fdaa0cbaabdc6c7f1a293a7fb5ae85e93a70

                              SHA512

                              66df57a2e325c7d074eea20911a85ea17202f5c6f9c9da74d5195bfcdbe0b35639f506c0d786649dc231fddccdefbc9c0af81e8db1260312e95c80e594119b8e

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              116KB

                              MD5

                              6597628b97f9b0833422ec705eb4aae9

                              SHA1

                              0ea795855e92cffc74a72b4c027fde069cfb851f

                              SHA256

                              285f8e9bd9484feb5dfcd956ce6223d675bf28985e9cc7ecc781c24f45b9b1c7

                              SHA512

                              9fbf9d857ed19c9e650a4b19abfb74e9868179628ea675e8d20cb7c730bfd76bebda575e0dfe859364b370338cc98f87142bfea6b8dd3e5122f7c4b942c9bbe5