Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

MSIAfterbu...65.exe

windows7-x64

7

MSIAfterbu...65.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    135s
  • max time network
    164s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2023, 10:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    MSIAfterburnerSetup465.exe

  • Size

    53.4MB

  • MD5

    38404e93313965e5a1120df7f41ea13c

  • SHA1

    c45b093120627cce2006f2497d3a611175e8f6b2

  • SHA256

    0ce5e5be2bd5eea2fe56e9332eb9f7aee3d7c78df61fe41ba3fde8e268076f12

  • SHA512

    f7e1b10a85f347971b3618003953ce12d1fee1cadb4cab6f606707d2b2ffe6470e9abc30f660818bd74e66bb60f761344278dee35fb05ae00eba170e371c0e1b

  • SSDEEP

    1572864:wmnOEc9uXqGt76mP7e5Gt76FPRX8i7kpOMPp:wmOfszt7TeYt7xZAMPp

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\MSIAfterburnerSetup465.exe
    "C:\Users\Admin\AppData\Local\Temp\MSIAfterburnerSetup465.exe"
    1⤵
    • Loads dropped DLL
    PID:1596
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1196 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:2
    1⤵
      PID:1824
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1468 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:8
      1⤵
        PID:532
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1632 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:8
        1⤵
          PID:920
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --mojo-platform-channel-handle=2168 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:1
          1⤵
            PID:1612
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --mojo-platform-channel-handle=2332 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:1
            1⤵
              PID:912
            • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
              "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
              1⤵
                PID:956
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1536 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:2
                1⤵
                  PID:936
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --mojo-platform-channel-handle=1368 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:1
                  1⤵
                    PID:1656
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3764 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:8
                    1⤵
                      PID:1824
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3880 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:8
                      1⤵
                        PID:2060
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=11 --mojo-platform-channel-handle=4128 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:1
                        1⤵
                          PID:2232
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --mojo-platform-channel-handle=2484 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:1
                          1⤵
                            PID:2380
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --mojo-platform-channel-handle=4488 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:1
                            1⤵
                              PID:2508
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=14 --mojo-platform-channel-handle=3524 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:1
                              1⤵
                                PID:2764
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --mojo-platform-channel-handle=3316 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:1
                                1⤵
                                  PID:2836
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --mojo-platform-channel-handle=3340 --field-trial-handle=1240,i,2696719278012813696,15195348017808742230,131072 /prefetch:1
                                  1⤵
                                    PID:2908

                                  Network

                                  MITRE ATT&CK Enterprise v6

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                    Filesize

                                    691B

                                    MD5

                                    067d04ecaa57f5afcdd30267e15f89af

                                    SHA1

                                    f044b4674fd082f1e532efcec910528cf690d6b1

                                    SHA256

                                    c0f932a22e8915ee50e697e174de39b85af716d61be9df608fcb16d99922fd88

                                    SHA512

                                    72d8862b437e419363602def6b5ab1b2ccda8a4d78af30002e7a9d8082b8732fc68b6bde03c3d028d441f5cc463c8e50b8f9910852066a23b95748e41bb9aef9

                                    Download Submit

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                    Filesize

                                    363B

                                    MD5

                                    13a3a9567fb49327cefd371f4bb9e5ef

                                    SHA1

                                    288fe35148ae8362539fc3c2f329d085d9550bb7

                                    SHA256

                                    6c86dec08395fe52fddac89a8b83268c6e20a5c2cfc770e90779258d799b9ffd

                                    SHA512

                                    0e843abd638306523601ce7b276770084c64826f41a06fdcd9cc4ec838b6589ed7ddb0d2840a773ee58e6869213d1c92f9e7dc0fe2d9dc3e65e4b299037c1f23

                                    Download Submit

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                    Filesize

                                    527B

                                    MD5

                                    cca496d58d93afa2fae569b24607cfce

                                    SHA1

                                    7081e01a9290f5b227bb21a7a7070406e046961a

                                    SHA256

                                    bdaa39ba6fe7b0172ceb32c2c53a0a43391ad1198071563d404bf178ef30bb66

                                    SHA512

                                    cb7a5d7436ab018a73a63d98100a093d8a6404d3944f0a4cf3c667d7381e2731b3668ff2e834bffe0d2152500856f7262c709b7e68f95bb84fa6292dde076e74

                                    Download Submit

                                  • C:\Users\Admin\AppData\Local\Temp\nsyAA93.tmp\LangDLL.dll
                                    Filesize

                                    5KB

                                    MD5

                                    08de81a4584f5201086f57a7a93ed83b

                                    SHA1

                                    266a6ecc8fb7dca115e6915cd75e2595816841a8

                                    SHA256

                                    4883cd4231744be2dca4433ef62824b7957a3c16be54f8526270402d9413ebe6

                                    SHA512

                                    b72e7cea5ce1f4dc64e65a1f683a3ef9e3fa2dc45cf421f569eb461f1fdcc0caf4ff62a872e62b400579f567c6ff9fc3c2e6e020cdca89d96015502c803a09b9

                                    Download Submit

                                  • \Users\Admin\AppData\Local\Temp\nsyAA93.tmp\LangDLL.dll
                                    Filesize

                                    5KB

                                    MD5

                                    08de81a4584f5201086f57a7a93ed83b

                                    SHA1

                                    266a6ecc8fb7dca115e6915cd75e2595816841a8

                                    SHA256

                                    4883cd4231744be2dca4433ef62824b7957a3c16be54f8526270402d9413ebe6

                                    SHA512

                                    b72e7cea5ce1f4dc64e65a1f683a3ef9e3fa2dc45cf421f569eb461f1fdcc0caf4ff62a872e62b400579f567c6ff9fc3c2e6e020cdca89d96015502c803a09b9

                                    Download Submit