Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

25/02/2024, 14:54

240225-r9z4esfa4v 3

25/02/2024, 14:48

240225-r6r9eaeh6z 3

Analysis

  • max time kernel
    62s
  • max time network
    158s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/02/2024, 14:48

General

  • Target

    fusionsystem.dll

  • Size

    37.4MB

  • MD5

    66bebbb9ec465d61395c70675e77dd40

  • SHA1

    09458b8c0b45e471029556955ba9f0dccf51cba7

  • SHA256

    4cf4bb8013690787577aeff60ece8f1c12f2fcc1e16c3c5df371aa7d9cecdd36

  • SHA512

    2f45720962637827bfa28f25ca08b2a9136774b0204731865fe81ff98b1fee1450ba7dcda2792da0339303d5dfbe1ab1e1c492da0748cba789a543cc428851db

  • SSDEEP

    393216:oN537iUU+TENa2S3Ne4eYwsO8qEw7xtyyVY+QbYlS+Xxo:ozCO30bdxlQ8TXx

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\fusionsystem.dll,#1
    1⤵
      PID:1972
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef7419758,0x7fef7419768,0x7fef7419778
      1⤵
        PID:2748
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1188 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:2
        1⤵
          PID:2644
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1548 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:8
          1⤵
            PID:2388
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1636 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:8
            1⤵
              PID:2392
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --mojo-platform-channel-handle=2172 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:1
              1⤵
                PID:2484
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --mojo-platform-channel-handle=2164 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:1
                1⤵
                  PID:2436
                • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                  "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                  1⤵
                    PID:1468
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1284 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:2
                    1⤵
                      PID:2028
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --mojo-platform-channel-handle=3200 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:1
                      1⤵
                        PID:2012
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2688 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:8
                        1⤵
                          PID:344
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=10 --mojo-platform-channel-handle=3792 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:1
                          1⤵
                            PID:1728
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3712 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:8
                            1⤵
                              PID:2460
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3696 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:8
                              1⤵
                                PID:1124
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --mojo-platform-channel-handle=3716 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:1
                                1⤵
                                  PID:556
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1136 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:8
                                  1⤵
                                    PID:1152
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --mojo-platform-channel-handle=2340 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:1
                                    1⤵
                                      PID:1736
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --mojo-platform-channel-handle=2000 --field-trial-handle=1220,i,9588196528982181482,12366019470224669616,131072 /prefetch:1
                                      1⤵
                                        PID:1588
                                      • C:\Windows\SysWOW64\DllHost.exe
                                        C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
                                        1⤵
                                          PID:376
                                        • C:\Windows\system32\rundll32.exe
                                          "C:\Windows\system32\rundll32.exe" pnidui.dll,NwCategoryWiz {362d691b-139f-4aba-928f-edc38a13bf0b} 0
                                          1⤵
                                            PID:2484

                                          Network

                                          MITRE ATT&CK Matrix

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001

                                            Filesize

                                            195KB

                                            MD5

                                            873734b55d4c7d35a177c8318b0caec7

                                            SHA1

                                            469b913b09ea5b55e60098c95120cc9b935ddb28

                                            SHA256

                                            4ee3aa3dc43cb3ef3f6bfb91ed8214659e9c2600a45bee9728ebbcb6f33b088d

                                            SHA512

                                            24f05ed981e994475879ca2221b6948418c4412063b9c07f46b8de581047ddd5d73401562fa9ee54d4ce5f97a6288c54eac5de0ca29b1bb5797bdac5a1b30308

                                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                            Filesize

                                            1KB

                                            MD5

                                            2a103e6710fda0d7a1e663eca56a5189

                                            SHA1

                                            475a9deeee263ff5cc6aae935176b9580e99d7ed

                                            SHA256

                                            d928742b20459c7f7ba229d640d0de204a0abdf6ea56b05c39f54c95314d85ef

                                            SHA512

                                            9be9405dce86c07e04dd6c5934552384b95ddb061a96c7d28ffeac2d3019267a17a8ea9396962c833640c5747f68fc178fc60afc9d9e3f7a5eae25d198ce54d9

                                          • memory/2484-52-0x0000000000450000-0x0000000000451000-memory.dmp

                                            Filesize

                                            4KB