Overview

overview

3

Static

static

1

URLScan

urlscan

1

phish_analysis

windows10-2004-x64

3

Analysis

  • max time kernel
    300s
  • max time network
    285s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    26/08/2026, 22:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    http://url4381.lulacommerce.com/wf/open?upn=u001.BiCaAh4SXdWfT-2BinQGByMuOnmr1a8T7N31nyBB8PPER0qVFs3Bzt-2By3Faeg7uPopM3fZmg6zPM-2BV4sy1-2BICYZVzoA3pT4rJ5NIKy8q-2BdWT8PGhc8QpUnY4bF25MiXmTa9Xr-2FdC7CVtYsP3MTfHsgyLeOkNVv-2FELTJpHbMGY1lP8uMDqVKlW-2BJbKXpXk4WlfQcmqaI0UTOYkmRi8QGM6coQ-3D-3D
  • Sample260826-2pfjdsbr2v
Score
3/10
discovery

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 19 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://url4381.lulacommerce.com/wf/open?upn=u001.BiCaAh4SXdWfT-2BinQGByMuOnmr1a8T7N31nyBB8PPER0qVFs3Bzt-2By3Faeg7uPopM3fZmg6zPM-2BV4sy1-2BICYZVzoA3pT4rJ5NIKy8q-2BdWT8PGhc8QpUnY4bF25MiXmTa9Xr-2FdC7CVtYsP3MTfHsgyLeOkNVv-2FELTJpHbMGY1lP8uMDqVKlW-2BJbKXpXk4WlfQcmqaI0UTOYkmRi8QGM6coQ-3D-3D
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1152
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc1aacc728,0x7ffc1aacc734,0x7ffc1aacc740
      2⤵
        PID:456
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,8387424237540385023,11559089641745748810,262144 --field-trial-handle=1992,i,2859229945029621114,12553453324465002376,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1988 /prefetch:2
        2⤵
          PID:4644
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,803623874823725864,13877364588338606361,524288 --field-trial-handle=1992,i,2859229945029621114,12553453324465002376,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2268 /prefetch:3
          2⤵
          • System Time Discovery
          PID:3296
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2376,i,15270283037125554794,5980735613207392697,524288 --field-trial-handle=1992,i,2859229945029621114,12553453324465002376,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2420 /prefetch:8
          2⤵
            PID:3780
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3088,i,2695684738896503643,1075095285979721896,2097152 --field-trial-handle=1992,i,2859229945029621114,12553453324465002376,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3180 /prefetch:1
            2⤵
              PID:5104
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3100,i,8900671970752596464,14455798649344870962,2097152 --field-trial-handle=1992,i,2859229945029621114,12553453324465002376,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3236 /prefetch:1
              2⤵
                PID:4168
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3924,i,6694914476907080847,16762673213209984750,2097152 --field-trial-handle=1992,i,2859229945029621114,12553453324465002376,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4424 /prefetch:2
                2⤵
                  PID:2456
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5340,i,6776564548824425268,1269887434098975101,524288 --field-trial-handle=1992,i,2859229945029621114,12553453324465002376,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5288 /prefetch:8
                  2⤵
                    PID:4316
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5356,i,17759255154846806983,8878296424745319690,524288 --field-trial-handle=1992,i,2859229945029621114,12553453324465002376,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5572 /prefetch:8
                    2⤵
                      PID:5068
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5556,i,4404627792284706823,5821301057576406984,524288 --field-trial-handle=1992,i,2859229945029621114,12553453324465002376,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5616 /prefetch:8
                      2⤵
                        PID:2940
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5576,i,13371642668928935007,16095489484329349789,524288 --field-trial-handle=1992,i,2859229945029621114,12553453324465002376,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5380 /prefetch:8
                        2⤵
                          PID:3900
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4520,i,15577920661000547591,9451388356111266316,262144 --field-trial-handle=1992,i,2859229945029621114,12553453324465002376,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4884 /prefetch:8
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:4480
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5428,i,7893782891406515210,10171226614608371068,524288 --field-trial-handle=1992,i,2859229945029621114,12553453324465002376,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1136 /prefetch:8
                          2⤵
                            PID:1840
                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                          1⤵
                            PID:3212
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                            1⤵
                              PID:2320

                            Network

                                  MITRE ATT&CK Enterprise v16

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  BookmarkMergedSurfaceOrdering
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                  • Size 6B
                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  BrowsingTopicsState
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                  • Size 414B
                                  • SHA256 f0d770a589c11a08a4111bc6239442c2cf21ee1e47fef45b80d618966711a880
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  Network Persistent State
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                  • Size 1KB
                                  • SHA256 1ca38e9573517019fef5b291e070c41ac98e5c8273250dd3c06e98c376a80685
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  SCT Auditing Pending Reports
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                  • Size 2B
                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  Preferences
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                  • Size 12KB
                                  • SHA256 4e8e9d2a7be3c5f1c54a158b5143f7c326614a87e85a2bf3054e126f7d6e06ed
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  Secure Preferences
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                  • Size 17KB
                                  • SHA256 7f2c3bb0b002e4d7d49e8ebd780daefdc42e5000eb8a51c5ee9d65c53ca14658
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  the-real-index
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                  • Size 120B
                                  • SHA256 44b2f9c2f110a8c979aab45406bbc69c02042570fab248f9726a816cacd629a5
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  the-real-index~RFe58a265.TMP
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a265.TMP
                                  • Size 96B
                                  • SHA256 5d2727cac8a646204e63695ced5c4a8dde65249504ca313343a116a3675085cc
                                  • MD5 SHA1 SHA512 TLSH
                                  Submit Download

                                  Local State
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                  • Size 116KB
                                  • SHA256 08eca95e7adeb7c9576760d51ef6aa352e610680afa67aa53d6892dcafce7ca8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  Local State
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                  • Size 117KB
                                  • SHA256 7d63b28952900cc1eca090ccc547971ac9eadef854ad9572163e698128011fb1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  Local State
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                  • Size 116KB
                                  • SHA256 ad27c04a2e81a53c3be4b573cbb89cf3bc5184e4bf60be73506dbfc373036585
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  Local State
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                  • Size 115KB
                                  • SHA256 336e599bd88116fe86ea3087fda77accacceca65b35026c112cec3a75f342ffd
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download

                                  Local State
                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                  • Size 116KB
                                  • SHA256 7d4d198ad47ed7deab110d8ff635578324555d39bc09fb87e006fafab3b54419
                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                  Submit Download