Automated Malware Analysis IOC Report for

Files

File Path

Type

Category

Malicious

Chrome Cache Entry: 45

MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel

downloaded

Details

File:	Chrome Cache Entry: 45
Category:	downloaded
Dump:	chromecache_45.4.dr
ID:	dr_6
Target ID:	4
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Entropy:	1.8139780344520928
Encrypted:	false
Ssdeep:	24:nvgQF2ky2bvnlPVdGFGFjn8za2XXcO9++f42AapCaku0Lunpi3kMFPWzlJa4B4LT:3dSmkZ6NJvrulIsW5ty4pDKoz+aR
Size:	22382
Whitelisted:	false
Reputation:	low

Chrome Cache Entry: 46

MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel

dropped

Details

File:	Chrome Cache Entry: 46
Category:	dropped
Dump:	chromecache_46.4.dr
ID:	dr_1
Target ID:	4
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Entropy:	1.8139780344520928
Encrypted:	false
Ssdeep:	24:nvgQF2ky2bvnlPVdGFGFjn8za2XXcO9++f42AapCaku0Lunpi3kMFPWzlJa4B4LT:3dSmkZ6NJvrulIsW5ty4pDKoz+aR
Size:	22382
Whitelisted:	false
Reputation:	low

Chrome Cache Entry: 47

HTML document, ASCII text

downloaded

Details

File:	Chrome Cache Entry: 47
Category:	downloaded
Dump:	chromecache_47.4.dr
ID:	dr_7
Target ID:	4
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	HTML document, ASCII text
Entropy:	4.993361035006213
Encrypted:	false
Ssdeep:	48:HvM9pmF8+tEhYSD+tmPFwG+tz9PPPnCqXyHi1VJT7dLt:kl+G5D+ED+DXfDySVdhLt
Size:	2247
Whitelisted:	false
Reputation:	low

Chrome Cache Entry: 48

PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced

dropped

Details

File:	Chrome Cache Entry: 48
Category:	dropped
Dump:	chromecache_48.4.dr
ID:	dr_3
Target ID:	4
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Entropy:	7.996174495971566
Encrypted:	true
Ssdeep:	3072:rvUYQ9en3RHMK9luY6v/YgRRqhGkhqaCypDx0zEy:jJZ3RSxggRc5yypt0zd
Size:	130877
Whitelisted:	false
Reputation:	low

Chrome Cache Entry: 49

ASCII text, with very long lines (3934), with no line terminators

downloaded

Details

File:	Chrome Cache Entry: 49
Category:	downloaded
Dump:	chromecache_49.4.dr
ID:	dr_8
Target ID:	4
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	ASCII text, with very long lines (3934), with no line terminators
Entropy:	5.078793077809424
Encrypted:	false
Ssdeep:	96:IUGLeVzi6wmaPyhxt2oeYXeaM+Uah1LDep8T/5iMc:IUTli6wVKJXOaNUah1LDep45ih
Size:	3934
Whitelisted:	false
Reputation:	low

Chrome Cache Entry: 50

PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced

downloaded

Details

File:	Chrome Cache Entry: 50
Category:	downloaded
Dump:	chromecache_50.4.dr
ID:	dr_9
Target ID:	4
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Entropy:	7.996174495971566
Encrypted:	true
Ssdeep:	3072:rvUYQ9en3RHMK9luY6v/YgRRqhGkhqaCypDx0zEy:jJZ3RSxggRc5yypt0zd
Size:	130877
Whitelisted:	false
Reputation:	low

Processes

Path

Cmdline

Malicious

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"

Details

Is windows:	true
Is dropped:	false
PID:	520
Target ID:	0
Parent PID:	6116
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Size:	3242272
MD5:	5BBFA6CBDF4C254EB368D534F9E23C92
Time:	10:30:40
Date:	02/10/2024
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff6c4390000
Modulesize:	3325952
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2412 --field-trial-handle=2380,i,1947905092517884519,3439299998469434712,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

Details

Is windows:	true
Is dropped:	false
PID:	4788
Target ID:	4
Parent PID:	520
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2412 --field-trial-handle=2380,i,1947905092517884519,3439299998469434712,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Size:	3242272
MD5:	5BBFA6CBDF4C254EB368D534F9E23C92
Time:	10:30:44
Date:	02/10/2024
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff6c4390000
Modulesize:	3325952
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://testflight.apple.com/v1/invite/0b18620dbe1845a6880e14b0388dfff50172158f2e114782ba97042551fd0300190968914?ct=FY463T33U7&advp=10000&platform=ios"

Details

Is windows:	true
Is dropped:	false
PID:	2032
Target ID:	9
Parent PID:	6116
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://testflight.apple.com/v1/invite/0b18620dbe1845a6880e14b0388dfff50172158f2e114782ba97042551fd0300190968914?ct=FY463T33U7&advp=10000&platform=ios"
Size:	3242272
MD5:	5BBFA6CBDF4C254EB368D534F9E23C92
Time:	10:30:49
Date:	02/10/2024
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff6c4390000
Modulesize:	3325952
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

Domains

Name

Malicious

bg.microsoft.map.fastly.net

199.232.210.172

www.google.com

172.217.16.132

Details

Name:	www.google.com
IP:	172.217.16.132
TargetID:	4
Current Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Active:	true

Signature Hits	Behavior Group	Mitre Attack
Performs DNS lookups	Networking	Application Layer Protocol Non-Application Layer Protocol

IPs

Domain

Country

Malicious

239.255.255.250

unknown

Reserved

192.168.2.7

unknown

172.217.16.132

www.google.com

United States

DOM / HTML

URL

Malicious

https://testflight.apple.com/v1/invite/0b18620dbe1845a6880e14b0388dfff50172158f2e114782ba97042551fd0300190968914?ct=FY463T33U7&advp=10000&platform=ios

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report
https://testflight.apple.com/v1/invite/0b18620dbe1845a6880e14b0388dfff50172158f2e114782ba97042551fd0300190968914?ct=FY463T33U7&advp=10000&platform=ios

Files

Processes

Domains

IPs

DOM / HTML

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Reporthttps://testflight.apple.com/v1/invite/0b18620dbe1845a6880e14b0388dfff50172158f2e114782ba97042551fd0300190968914?ct=FY463T33U7&advp=10000&platform=ios

Files

Processes

Domains

IPs

DOM / HTML

IOC Report
https://testflight.apple.com/v1/invite/0b18620dbe1845a6880e14b0388dfff50172158f2e114782ba97042551fd0300190968914?ct=FY463T33U7&advp=10000&platform=ios