Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
12/11/2023, 14:16
Static task
static1
Behavioral task
behavioral1
Sample
netflix-x86_64.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
netflix-x86_64.exe
Resource
win10v2004-20231023-en
General
-
Target
netflix-x86_64.exe
-
Size
16.1MB
-
MD5
80aac9eb41661617c92c8702e4299168
-
SHA1
cada37d3bc65b3140fdbe868bce04e88e8ec2a0b
-
SHA256
c214e056432c4e65fcd8ce76cbd81e91bda8a6c45a0c044f745bfa68c27d996c
-
SHA512
14baa55f67addb35977784ead85f6f247063cc8d26a6430a406e4461fcd9bab1b011a2277a7733b90034d31d1882b50a37538a258478503b2bae8feddad86e5b
-
SSDEEP
393216:P3Z8A06vEQ3ITvzx46SxiILGREuV3WjG8Q:P3ZIzx46YNL6WKf
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4540 chrome.exe 4540 chrome.exe
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1708 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:21⤵PID:1320
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2272 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:81⤵PID:4724
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:81⤵PID:3380
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --mojo-platform-channel-handle=3292 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:11⤵PID:4824
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --mojo-platform-channel-handle=3272 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:11⤵PID:3244
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:1444
-
C:\Users\Admin\AppData\Local\Temp\netflix-x86_64.exe"C:\Users\Admin\AppData\Local\Temp\netflix-x86_64.exe"1⤵PID:2768
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --mojo-platform-channel-handle=4704 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:11⤵PID:4772
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4628 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:81⤵PID:448
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4968 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:81⤵PID:2708
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5252 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:81⤵PID:4392
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5312 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:81⤵PID:4284
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --mojo-platform-channel-handle=3580 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:11⤵PID:4800
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --mojo-platform-channel-handle=3264 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:11⤵PID:3840
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6092 --field-trial-handle=1932,i,18337211917669115517,14625284508915380582,131072 /prefetch:21⤵
- Suspicious behavior: EnumeratesProcesses
PID:4540
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2KB
MD5dded51fb0a21fce0981a5c5762140ddc
SHA168f2083561dbf57549c691b5822d8625e236975f
SHA256bb7ab26e5c16565b72e39d58b088e3352be006fb186c5424f48436f0896b81a2
SHA512a01b4fce1a1fa8f02979a4c6dd396a1b72e26b92249c03bdd0cac67ababdb523974fa0c82d9b83a369434f597c9146b140ba895eed27613aa0414040090febc0
-
Filesize
1KB
MD5e86da81052c097f6e277d41be25b9f4a
SHA1edaad569075cd9e0e40f07ab9b6e28a28142b166
SHA2567074a7a66527613553d13b533cca7ab045a3a06c4f9c04814179795a0cd48adf
SHA5120d55b6b457d5c8b07a0112b7bd853b0c0b0dde0cd248770896b9e0d363f730c12bafce45ce8f32ff142e060ab22274e8061cc4d71faf2303a7c0d1a487cb3db4
-
Filesize
369B
MD5ebfe4948bfa364f57e50b264e6cd4f79
SHA11ce97702fcfdda81bd40ae16e887bc9b3820015b
SHA25665881b638ccff4a965e4ffa8f5f447add9ae1782d6de7e27d79e42cb7ca588e7
SHA512fc7f43130aa0f2d740eeec4c39432811de3f3f949d3e62b6d711f63fe6377938b45624249fdd3c7dab08f3af9a1b6df0735f40262e639937eadd4026b83e4337
-
Filesize
1KB
MD534b9b98de4c962e1046d0478dab11e71
SHA1a47b109ac5bc3b2fa7b335f8a6dda62b4ec8fcf6
SHA256b1f989f0373da04a4d358a106747cc583fe7342eef9bfd1c913487373a6200b6
SHA512ce871bb0f9fee8ce41b6bf68484d6bfd75f98c26bb0d80ed8cd5b4ad22bf05c9230084086cc968d3d8b01a173ba0b4ab8a625f89f07d36cbee507eb43522fb9d
-
Filesize
873B
MD53c536897538eadcdacf94e0c3a0e06e0
SHA1e5949cf0cef84863389adec12bc3555fe8d20e2b
SHA256b33d75e2bfea65aa54decd643687ef24ae301d53e9955cd514c28c0e9063b515
SHA5127c765aacd52008553efc3dfd58a093ae4ba00f4df57338ac4ad24d731d541ef5f2b198c0c9539cf26c36820ec377d2884cd395d83274c54e8634705634cf9ece