Automated Malware Analysis IOC Report for

Processes

Path

Cmdline

Malicious

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"

Details

Is windows:	true
Is dropped:	false
PID:	3248
Target ID:	0
Parent PID:	5968
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Size:	3242272
MD5:	5BBFA6CBDF4C254EB368D534F9E23C92
Time:	21:49:14
Date:	25/04/2024
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff684c40000
Modulesize:	3325952
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1692,i,17621815830497467087,13166226885346699693,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

Details

Is windows:	true
Is dropped:	false
PID:	7128
Target ID:	2
Parent PID:	3248
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1692,i,17621815830497467087,13166226885346699693,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Size:	3242272
MD5:	5BBFA6CBDF4C254EB368D534F9E23C92
Time:	21:49:18
Date:	25/04/2024
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff684c40000
Modulesize:	3325952
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ZRsivJd9eJZYI6hYZjp4HaBmXIoenPbMYtTOvHDYBU1biEGhdygsHh9L2pifi7NsFd8FFuTKZy7oRJyRVkGRbLUy69jTFmb4TriJxwINiudeD8EFPxuOWL6Gz7Y1Q_Nhu9YF0CDO1a9GpmuT_JaBulU9ZlgG0XUtjfn6OtQHLGfj_7jywaNlGcgZDMEl6kwUBbnirb_9br0X5shiNiwX4VUZDcx4TYOb3sM2wpz2yfKg1MgxZ1YJL-O2Cgk4bYCNefiWCiFF6AWzX5TW-0MLSz0G_WzeGmbrF2OdN0t4ZaqmVPDCNASJelVCumDRTBmHv8sIc2WmxIRpA8qkLj06C6cWMpqHsEj6IYHXdzG6zw8bE0uRgAFYaztmMGMfBs5Ou90QtGia25xnEYig2RimxQAVmP4oxXMlmRiYxndT0-RDxmvx3k_BuoWxzTrt35UuefUC2PNrEt7DqDzvymqQE8az3WUFcrdKVEpRTdUH4zq-nCBg0JhgBMYtqLppPzNE5vLHgHwvB5J4iGlrnsWA2iGo-KimvthNAA96Mjj0vhzXJq6aZZWcezookCdv6cRGm76TFE-eBVXjDcNWZ7pTeVhlZVBE-nWHFXCW5epYz-roVt5e_k5gOZmbC1Bv1z1RMTAkxNK3N4YKGvvwCV3dmuNIncEfrV6CcQrEh_k5sZC-9S7Jgk7ifHL0ufBo6awzBPiJsKSokti992kEAPGlVwMxbWJNcjKuJs48fsvKjXzK1lPPLeIx_w3cfpg11UXMUN4_WTXdDqXSCHVDy0gQmAlEOodYXzVL27FKnQEDckRfNx_GFF1zc1PYklLH3ygh_zwV5b1zh_JD4Q2xICJySXrTX45B_ZAjPhU2FM8IsVbeHGqNNdLqW7xePm48sx8ni2LO4ZfADTbQfDhPASjRLJ5-RvfeQZIj2SYlR&state=18471666-cc8e-484a-a9f8-e361977136bc&session_state=3961325a-3a84-4a62-86ce-1defb25719b4#"

Details

Is windows:	true
Is dropped:	false
PID:	3392
Target ID:	3
Parent PID:	5968
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ZRsivJd9eJZYI6hYZjp4HaBmXIoenPbMYtTOvHDYBU1biEGhdygsHh9L2pifi7NsFd8FFuTKZy7oRJyRVkGRbLUy69jTFmb4TriJxwINiudeD8EFPxuOWL6Gz7Y1Q_Nhu9YF0CDO1a9GpmuT_JaBulU9ZlgG0XUtjfn6OtQHLGfj_7jywaNlGcgZDMEl6kwUBbnirb_9br0X5shiNiwX4VUZDcx4TYOb3sM2wpz2yfKg1MgxZ1YJL-O2Cgk4bYCNefiWCiFF6AWzX5TW-0MLSz0G_WzeGmbrF2OdN0t4ZaqmVPDCNASJelVCumDRTBmHv8sIc2WmxIRpA8qkLj06C6cWMpqHsEj6IYHXdzG6zw8bE0uRgAFYaztmMGMfBs5Ou90QtGia25xnEYig2RimxQAVmP4oxXMlmRiYxndT0-RDxmvx3k_BuoWxzTrt35UuefUC2PNrEt7DqDzvymqQE8az3WUFcrdKVEpRTdUH4zq-nCBg0JhgBMYtqLppPzNE5vLHgHwvB5J4iGlrnsWA2iGo-KimvthNAA96Mjj0vhzXJq6aZZWcezookCdv6cRGm76TFE-eBVXjDcNWZ7pTeVhlZVBE-nWHFXCW5epYz-roVt5e_k5gOZmbC1Bv1z1RMTAkxNK3N4YKGvvwCV3dmuNIncEfrV6CcQrEh_k5sZC-9S7Jgk7ifHL0ufBo6awzBPiJsKSokti992kEAPGlVwMxbWJNcjKuJs48fsvKjXzK1lPPLeIx_w3cfpg11UXMUN4_WTXdDqXSCHVDy0gQmAlEOodYXzVL27FKnQEDckRfNx_GFF1zc1PYklLH3ygh_zwV5b1zh_JD4Q2xICJySXrTX45B_ZAjPhU2FM8IsVbeHGqNNdLqW7xePm48sx8ni2LO4ZfADTbQfDhPASjRLJ5-RvfeQZIj2SYlR&state=18471666-cc8e-484a-a9f8-e361977136bc&session_state=3961325a-3a84-4a62-86ce-1defb25719b4#"
Size:	3242272
MD5:	5BBFA6CBDF4C254EB368D534F9E23C92
Time:	21:49:21
Date:	25/04/2024
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff684c40000
Modulesize:	3325952
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

Domains

Name

Malicious

bg.microsoft.map.fastly.net

199.232.214.172

google.com

64.233.185.139

Details

Name:	google.com
IP:	64.233.185.139
TargetID:	2
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Active:	true
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Performs DNS lookups	Networking	Application Layer Protocol Non-Application Layer Protocol

www.google.com

64.233.177.106

Details

Name:	www.google.com
IP:	64.233.177.106
TargetID:	2
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Active:	true
Reputation:	high

Signature Hits	Behavior Group	Mitre Attack
Performs DNS lookups	Networking	Application Layer Protocol Non-Application Layer Protocol

fp2e7a.wpc.phicdn.net

192.229.211.108

IPs

Domain

Country

Malicious

64.233.177.106

www.google.com

United States

239.255.255.250

unknown

Reserved

192.168.2.6

unknown

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Processes

Domains

IPs