Analysis
- geolocation tags
cacanadananorth-americatoronto - max time kernel
0s - max time network
142s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
24/09/2026, 15:57
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://razisystem.ir/upply/review.html
Resource
win11-20260911-en
7 signatures
150 seconds
General
- Target https://razisystem.ir/upply/review.html
- Sample260924-tecqragd25
Score
6/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 2252 chrome.exe - Enumerates system info in registry 2 TTPs 2 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe - Suspicious use of FindShellTrayWindow 9 IoCs
pid Process 4240 chrome.exe 4240 chrome.exe 4240 chrome.exe 4240 chrome.exe 4240 chrome.exe 4240 chrome.exe 4240 chrome.exe 4240 chrome.exe 4240 chrome.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 4240 chrome.exe 4240 chrome.exe 4240 chrome.exe - Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4240 wrote to memory of 632 4240 chrome.exe 81 PID 4240 wrote to memory of 3700 4240 chrome.exe 82 PID 4240 wrote to memory of 3700 4240 chrome.exe 82
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://razisystem.ir/upply/review.html1⤵
- Enumerates system info in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4240 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc719ac728,0x7ffc719ac734,0x7ffc719ac7402⤵PID:632
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1580,i,6761099525967054599,7386143208500167453,262144 --field-trial-handle=1940,i,7865045290436027339,5250860293105740355,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1936 /prefetch:22⤵PID:3700
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2220,i,14294619164420116133,14015500806080049666,524288 --field-trial-handle=1940,i,7865045290436027339,5250860293105740355,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2224 /prefetch:112⤵
- System Time Discovery
PID:2252
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2368,i,13730384342225998474,9208468537335239682,524288 --field-trial-handle=1940,i,7865045290436027339,5250860293105740355,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2840 /prefetch:132⤵PID:1128
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2704,i,15977294493424000357,15956347312463450506,2097152 --field-trial-handle=1940,i,7865045290436027339,5250860293105740355,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3096 /prefetch:12⤵PID:1100
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2948,i,5161848436402421957,14081563217652901660,2097152 --field-trial-handle=1940,i,7865045290436027339,5250860293105740355,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3116 /prefetch:12⤵PID:1180
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5152,i,7766122129201893158,4316033502200414555,524288 --field-trial-handle=1940,i,7865045290436027339,5250860293105740355,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5116 /prefetch:142⤵PID:4852
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5392,i,3748413554472262005,1278460950314264003,524288 --field-trial-handle=1940,i,7865045290436027339,5250860293105740355,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5448 /prefetch:142⤵PID:4532
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5424,i,15225927980565151617,14540265873428066333,524288 --field-trial-handle=1940,i,7865045290436027339,5250860293105740355,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5404 /prefetch:142⤵PID:4496
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5444,i,11525661189035425512,15611426755720380726,524288 --field-trial-handle=1940,i,7865045290436027339,5250860293105740355,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5388 /prefetch:142⤵PID:1272
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5456,i,6330101944802118809,16628178404409993065,262144 --field-trial-handle=1940,i,7865045290436027339,5250860293105740355,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5192 /prefetch:102⤵PID:1424
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:2448
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:3168
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 649B
- SHA256 4bc61b1d38fb7f45823d3ff25f63b053491c7dc55c8ecdfc8ca88c23e846106f
- MD5 871adf28dfb812a6297a8ab1dce1b819
- SHA1 4e238edc6aaa8c438c18a8c2f0ac27e348fe9244
- SHA512 14bd71c8d52b30cc7168d602a9870216c253b5d3b1e2d84f8947e64e8a71a14bd5e4b48f57003b1c48a2501851bb601feda88dfe35f228badb6a7d88d617590b
- TLSH T18DF0F4A9C921EC2718FC1F6961684B0BE780231B2B41998F3B3D921D8FB163B8585C2C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 1KB
- SHA256 307d2ca23031592f3e77856a9bee730b693154bbc63cffb4f3150ccc9447db2d
- MD5 2bb7f47c349391cfb6ce2d7d3ec1e904
- SHA1 d2d165e6731456d6bf4a6e549b2e2edfa780b94c
- SHA512 18fc946ab3b1e1cc744951ec97866bdca04415b45a898a685086d3d3f4eba697c5af26e33042713ebab776bc598321ecfad944fc21c3f03b1fbd70405ba1f06a
- TLSH T1AA416DF7C3D8967D890156F8AB156F1BCE690E24531C3C56D8D4AE2F53E28F1D21058E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 2KB
- SHA256 605e100fd47daed00b8f4587ee0a20f48600bd3524b8efae02f35a1f620f706a
- MD5 0463727820264ed2ce02e0e6f67458d2
- SHA1 e0222050461c4ccc60a535ccbf4dc42d1f84a204
- SHA512 e2d9dde257b30111af0ae0cc238c1134e0e304f0558d592510ddaf7ba3a26ead930b6a8366a197d6049619dbcf984b629c5a31fe8b6b7f9a3d5d5e6303d9b278
- TLSH T116418CF7C3D8867D891156F8AB156E1BCE2D0E14532D3C16C8D8AE1F93E29B2D21069F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 11KB
- SHA256 b52c7d052263d5b9406e0a03ce5b8ade137efee0dce663585d562e39b59f7e44
- MD5 6e2d022e7ebdcc06dce616217ed879fb
- SHA1 6b39f65ddafce7a4fd60a753de65c8b2b0df060a
- SHA512 b8fb38907ed30659743ac1d793ae8c9e88d09af55cdf6e5f36b98aec55361afd39991cf34bb48abf76e41dd77d952f2957de1259a53c9e7962193a2b42e009d6
- SSDEEP 192:WRaesaAgv7+7pAPRp2l6y9ZHsb+WNnxlY6IH2h/2MeMWVyIsnAUge:WRaeO8S7UXbybw7Xs2h2/e
- TLSH T18732B52DEE50753B5DEBC21EF9757B5BE2F5102225912E80E6FC892C21E76CC2227027
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 4e974f61cf3f1f4a9f13febb7821793372a6bd0e0fac80c4a33b452d747a0ba5
- MD5 c2812d0b6524939cf4ad71c506cee4a6
- SHA1 72631f68cd1d2463935d2b7dcac0dd93018d82f2
- SHA512 984fce11c659cfaf40eaf657a1dc4a292e5482308d8cda42683ea04d8afc89a886fc3d2a272b71215d1b720af11a5914513f4298855e740ae1e4a0afb971014c
- SSDEEP 192:WRaesaAgv7+7puPRpITl6y9ZHsb+WNnxlY6IH28/2MeMCVyIsnAUgE:WRaeO8S7qX9ybw7Xs2S2NE
- TLSH T18142B52DAE10793B5CEAD21EF9757B57E2F4102325912E44E6FC892D21E76CC2227027
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 13KB
- SHA256 cbcfbe27999bbf1c38c32cf734dbc58c0c74e8fb94cebfe52fc4ac99ec4b2c4e
- MD5 2687abbcac7af17c0b616b501e486b1d
- SHA1 baf57c5410325446dd74e61be138853be50fcccc
- SHA512 d6063c76c0f9513dcd556327052394a8fbae929daff68178795f4017c88a3a038bc8b09526fadfd4132488a9d51a09e3cd9ab6243430667f2c455f48c796d43f
- SSDEEP 384:3hjb67KxkXqKf/pUZNCgVLH2HfgslxwXODb++ErU3l6HGjOoAWI8n:3hb67KxkXqKf/pUZNCgVLH2HfgsP6OPJ
- TLSH T19152F867A84D9A7F0FD8C94DD8266F4FACB5015766680C6893FB5C0803E5BCB114A2F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 131KB
- SHA256 3663bf256c58e30fe81711a7af605d0518674fce78ffda723d02fa34e28adfd3
- MD5 be05ffdf6eb6049538a4c9c8106d7cd8
- SHA1 4c23abe4222c37c5e264567efa0d138b1ce1cdc5
- SHA512 394bdabab89559b642b0b89f12510de0185bd71572666eb55f1be73276ccad06b35253cff3ae4f2a97b5b187f1332c8028266813b14dac144e10c32b8407fbc8
- SSDEEP 3072:5hgYVmX/M9F03bZTGnbgKfHWuoJqrAKrpQpbOYg3xC1:5xmX/B5UgKf2ne1utL1
- TLSH T105D302BE9CDCEFA36392B026A9A91B5BC9F67BC95161DF4081F01185009F1FD83D9A13
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 166KB
- SHA256 bb833b58c670bf72c56d1a81b1d8c19d7537b09679695ea3ecaed94f6030668e
- MD5 86dad1d881bd0e109d325ce95adc8f64
- SHA1 cc17a144a8654363cf52ad61c33fce02005efb6c
- SHA512 3b3eb5f489715ce4c53a64cfbcd984a0f428d04e6d4421c6857d9328acd42c6cf42dca9e3f88f9bd3ac3be34e415a97bbaaa05f433843dd8e75b7e6496e9a09a
- SSDEEP 3072:iI79yd7ooKgUSHyhgYVmX/M9F03bZTGnbgKfHWuoJqrAKrpQpbOYg3xC1:iIzXglHyxmX/B5UgKf2ne1utL1
- TLSH T11DF3127E9CCCDF5327A1F126A9665B9ACAF27FDD6059EE4090F400C5009F1FE8299923
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 130KB
- SHA256 6a65e541530b83f2acbc8ee4f41ecd5227f20e15d254d637edf185a15f29dbfe
- MD5 8fb96aee8bdb33912f5cd1dd4e0b1196
- SHA1 145f8bd834a233e20056fafbd8db5d56fba6566e
- SHA512 0dbb8073fe5ea6b3cf864298e4e0da30f3e2430a1c27b51ee7df73468fe76f93fc570757a696941abbf310fd35fdf070d4ae93b5d3efb7fbc26a1de92c05d084
- SSDEEP 3072:HhgYVmX/M9F03bZTGnbgKfHWuoJqrAKrpQpbOYg3xC1:HxmX/B5UgKf2ne1utL1
- TLSH T14FD302BE9DD9DFE36361B026A9A95B6EC9F67FC8A160DA4080F41085009F1FD4399A13
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 131KB
- SHA256 a8f0ba165690e9190240c8754ba5e56087f8fd2ff328e5f92142aaa664d54be5
- MD5 59de1ac20b464599b4bbe9bd16e5e065
- SHA1 52fbe98eecd450ff34c3c08b801af4b77325ef08
- SHA512 206ecbb0d6dbf92891687e47b4b693b7f28d296de86388abdf3677d00d5798c947de2e54105f5c8a4f1254c135db83e1f517e25c38594459e72abd0e00061b74
- SSDEEP 3072:ChgYVmX/M9F03bZTGnbgKfHWuoJqrAKrpQpbOYg3xC1:CxmX/B5UgKf2ne1utL1
- TLSH T15CD312BE9CDCEFA36392B026A9A91B5BC9F67BC85160DF4081F01185009F1FD83D9A13
- MD5 SHA1 SHA512 SSDEEP TLSH