Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/11/2023, 14:16

General

  • Target

    netflix-x86_64.exe

  • Size

    16.1MB

  • MD5

    80aac9eb41661617c92c8702e4299168

  • SHA1

    cada37d3bc65b3140fdbe868bce04e88e8ec2a0b

  • SHA256

    c214e056432c4e65fcd8ce76cbd81e91bda8a6c45a0c044f745bfa68c27d996c

  • SHA512

    14baa55f67addb35977784ead85f6f247063cc8d26a6430a406e4461fcd9bab1b011a2277a7733b90034d31d1882b50a37538a258478503b2bae8feddad86e5b

  • SSDEEP

    393216:P3Z8A06vEQ3ITvzx46SxiILGREuV3WjG8Q:P3ZIzx46YNL6WKf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1708 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:2
    1⤵
      PID:1320
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2272 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:8
      1⤵
        PID:4724
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:8
        1⤵
          PID:3380
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --mojo-platform-channel-handle=3292 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:1
          1⤵
            PID:4824
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --mojo-platform-channel-handle=3272 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:1
            1⤵
              PID:3244
            • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
              "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
              1⤵
                PID:1444
              • C:\Users\Admin\AppData\Local\Temp\netflix-x86_64.exe
                "C:\Users\Admin\AppData\Local\Temp\netflix-x86_64.exe"
                1⤵
                  PID:2768
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --mojo-platform-channel-handle=4704 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:1
                  1⤵
                    PID:4772
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4628 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:8
                    1⤵
                      PID:448
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4968 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:8
                      1⤵
                        PID:2708
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5252 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:8
                        1⤵
                          PID:4392
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5312 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:8
                          1⤵
                            PID:4284
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --mojo-platform-channel-handle=3580 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:1
                            1⤵
                              PID:4800
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --mojo-platform-channel-handle=3264 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:1
                              1⤵
                                PID:3840
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6092 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:2
                                1⤵
                                • Suspicious behavior: EnumeratesProcesses
                                PID:4540

                              Network

                              MITRE ATT&CK Matrix

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                Filesize

                                2KB

                                MD5

                                dded51fb0a21fce0981a5c5762140ddc

                                SHA1

                                68f2083561dbf57549c691b5822d8625e236975f

                                SHA256

                                bb7ab26e5c16565b72e39d58b088e3352be006fb186c5424f48436f0896b81a2

                                SHA512

                                a01b4fce1a1fa8f02979a4c6dd396a1b72e26b92249c03bdd0cac67ababdb523974fa0c82d9b83a369434f597c9146b140ba895eed27613aa0414040090febc0

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                Filesize

                                1KB

                                MD5

                                e86da81052c097f6e277d41be25b9f4a

                                SHA1

                                edaad569075cd9e0e40f07ab9b6e28a28142b166

                                SHA256

                                7074a7a66527613553d13b533cca7ab045a3a06c4f9c04814179795a0cd48adf

                                SHA512

                                0d55b6b457d5c8b07a0112b7bd853b0c0b0dde0cd248770896b9e0d363f730c12bafce45ce8f32ff142e060ab22274e8061cc4d71faf2303a7c0d1a487cb3db4

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                369B

                                MD5

                                ebfe4948bfa364f57e50b264e6cd4f79

                                SHA1

                                1ce97702fcfdda81bd40ae16e887bc9b3820015b

                                SHA256

                                65881b638ccff4a965e4ffa8f5f447add9ae1782d6de7e27d79e42cb7ca588e7

                                SHA512

                                fc7f43130aa0f2d740eeec4c39432811de3f3f949d3e62b6d711f63fe6377938b45624249fdd3c7dab08f3af9a1b6df0735f40262e639937eadd4026b83e4337

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                1KB

                                MD5

                                34b9b98de4c962e1046d0478dab11e71

                                SHA1

                                a47b109ac5bc3b2fa7b335f8a6dda62b4ec8fcf6

                                SHA256

                                b1f989f0373da04a4d358a106747cc583fe7342eef9bfd1c913487373a6200b6

                                SHA512

                                ce871bb0f9fee8ce41b6bf68484d6bfd75f98c26bb0d80ed8cd5b4ad22bf05c9230084086cc968d3d8b01a173ba0b4ab8a625f89f07d36cbee507eb43522fb9d

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                Filesize

                                873B

                                MD5

                                3c536897538eadcdacf94e0c3a0e06e0

                                SHA1

                                e5949cf0cef84863389adec12bc3555fe8d20e2b

                                SHA256

                                b33d75e2bfea65aa54decd643687ef24ae301d53e9955cd514c28c0e9063b515

                                SHA512

                                7c765aacd52008553efc3dfd58a093ae4ba00f4df57338ac4ad24d731d541ef5f2b198c0c9539cf26c36820ec377d2884cd395d83274c54e8634705634cf9ece