Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/05/2024, 16:29

General

  • Target

    https://support.parksidetech.com/register/hAdcp2CRXt9feHMoP2t

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://support.parksidetech.com/register/hAdcp2CRXt9feHMoP2t
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:652
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ff8c150ab58,0x7ff8c150ab68,0x7ff8c150ab78
      2⤵
        PID:2336
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1724 --field-trial-handle=1904,i,18118302570868385247,15621208176033787648,131072 /prefetch:2
        2⤵
          PID:1660
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 --field-trial-handle=1904,i,18118302570868385247,15621208176033787648,131072 /prefetch:8
          2⤵
            PID:3052
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2240 --field-trial-handle=1904,i,18118302570868385247,15621208176033787648,131072 /prefetch:8
            2⤵
              PID:5056
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3064 --field-trial-handle=1904,i,18118302570868385247,15621208176033787648,131072 /prefetch:1
              2⤵
                PID:1708
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3084 --field-trial-handle=1904,i,18118302570868385247,15621208176033787648,131072 /prefetch:1
                2⤵
                  PID:436
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4680 --field-trial-handle=1904,i,18118302570868385247,15621208176033787648,131072 /prefetch:8
                  2⤵
                    PID:1992
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4356 --field-trial-handle=1904,i,18118302570868385247,15621208176033787648,131072 /prefetch:8
                    2⤵
                      PID:3808
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4356 --field-trial-handle=1904,i,18118302570868385247,15621208176033787648,131072 /prefetch:8
                      2⤵
                        PID:996
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4700 --field-trial-handle=1904,i,18118302570868385247,15621208176033787648,131072 /prefetch:8
                        2⤵
                          PID:5040
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4680 --field-trial-handle=1904,i,18118302570868385247,15621208176033787648,131072 /prefetch:8
                          2⤵
                            PID:3660
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2584 --field-trial-handle=1904,i,18118302570868385247,15621208176033787648,131072 /prefetch:2
                            2⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:3736
                        • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
                          1⤵
                            PID:4584

                          Network

                          MITRE ATT&CK Enterprise v15

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                            Filesize

                            216B

                            MD5

                            d900d2dad138c2a17f7c4ec0c76875da

                            SHA1

                            1708a5c9e367f1d8591ed063f90524dc15d8a047

                            SHA256

                            a456352b98cd1ef6f5ff1a71033517facb4b06b5a94d13a964e0004080f76def

                            SHA512

                            67d70def7f6b447c330bcfcd84485da0cf48120c223164e11a9f28e74d9402d07da0c50b4bdc597b2d61716481c5709cbc487826e15d0334651a8898acdd198a

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                            Filesize

                            216B

                            MD5

                            eaf370c01b1ada924268c42d11b08d7b

                            SHA1

                            20ee60a03f514498753e9efbd1d07221bc2305bc

                            SHA256

                            cf542eb42dc2e69c59f5d5654520ab98ce71cf9cbc4121af0e5be4822544fac9

                            SHA512

                            0551c240a3439a962116e5cad7d359feb44cfd47e17fa61d7223e871e650dbc0e9c197036f2990a831e4c10001b1a28ab4c01bdacb8477bcd06b2b3f2981b834

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            1KB

                            MD5

                            420f4dc2f89cf6c5fec6777c34dbd98a

                            SHA1

                            77ee6ce5aa782b395f33599d9f52fdee8ee9007b

                            SHA256

                            6413d7a87bf5ca11bf00da4cb47e360bd9e111326cdcd0acc2a3d5f2388f34fe

                            SHA512

                            f7bf9ac2d0859eb1a6ab07f71484fa1b2e8979f7af2e83b820c2b3d19720191e4ea5d3fbc60e0629df93dee5b8311ccb4288c40b1bb8b6dcc333f655eb85b9fe

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            1KB

                            MD5

                            b061bcd7f3bbd5a5f238e5fbf5bc968e

                            SHA1

                            8ce10bce694cfddaf177c3ffc58a99e464fdda2f

                            SHA256

                            1038aefb20a3d55916e28a88e6d3e5c48b92cb6da1bdcdea495dd2259fb65e8a

                            SHA512

                            f4120313f0ea7ae17d0c8c15e894e79a8fd2764a8805248b2720d1996af1e350b642599be66428ecede4db2db5cbe01cfa2ef5441bedce0a1fbb71cfbd212d32

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            2KB

                            MD5

                            46ed29ba43a2b11232cdf33d3f3e1071

                            SHA1

                            bff4b3f85ee975ba7e14d5b932748db4a73b6683

                            SHA256

                            bf896089fc462fb88024127c5eadede16ca097df150428aa252bba19a7c076d9

                            SHA512

                            71804698f7d688b7dd62f7296ea6a96621b25e5fc2fc9b649b7a852165c18e763c6583bce795f9efaf5459e3104c36ae92c1b12f5beff1cf89068934aa8d9643

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            2KB

                            MD5

                            79c5e58042433318e5c6c46991a9cd5b

                            SHA1

                            cf6362fd0e0bda5cdb17f2d78c4e784e1168dd5b

                            SHA256

                            74303f8ca00cd03486d16191a5f2fe9403d9b3a733b310be3f12511ef14ed3f0

                            SHA512

                            4d2dc0cff27e007590ca5fdc52f52021c2ca2b6bd9c580814c2dcb4fa31f84012258b0bb4f93459e7293a2f9d94f1dd8e37573216ba1a53cde57800a201d6986

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                            Filesize

                            2B

                            MD5

                            d751713988987e9331980363e24189ce

                            SHA1

                            97d170e1550eee4afc0af065b78cda302a97674c

                            SHA256

                            4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                            SHA512

                            b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                            Filesize

                            1017B

                            MD5

                            568d031185038b79bdda9009bcc6e9bd

                            SHA1

                            7d2f0cce02c05de445ca28accfd8a27504dc8329

                            SHA256

                            f5ea13f419a170b81b9c0934870bbd9277ac18e7f796b05d06f5021620689434

                            SHA512

                            1754727b26fdabb971a249e8b317b5df423f81be0f21c1dddfb7337e7cc5c6972d6f489c2ac84bb13c59495f08bb17ad69561dd80365b05f0454f98181d24eac

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                            Filesize

                            1017B

                            MD5

                            cd9affe83bef600a83dcd747b9d4f142

                            SHA1

                            70872aedc4ca2cd866010c07011888c399edb409

                            SHA256

                            687c6ccc0ba1f442dba192cfb925d60fca60f7eec4145439898dc3a513045e46

                            SHA512

                            61de56055cbaf4f7526f7e3c11514b97ffe7cbd72933d459176d08f37f26a51a8b6689d60c37b222f46027bf4cc0fa670f28dcf1f4e9ab795fd5f2bcabe82660

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            7KB

                            MD5

                            6d2623afe887bd1dce7212197d11fc1a

                            SHA1

                            af767a41338ffa671e5d8a78c739d70ca847121e

                            SHA256

                            77609e9b722cda185b4919c1a7d38cc21c04baab8be4d16f03ad3d51caa3c8b5

                            SHA512

                            38541a2ff726d5fd2b6c1a96394be9d313a2ea5768e1e7091635c463b8207f74962d8d8d3f277b87c8edf754fcb01b274e1ce7b877d9e47c3198628164a87044

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            7KB

                            MD5

                            d55e3fb14a38792c6eb0d25763c7af46

                            SHA1

                            2f992be1a45c056282f7ca5ced3c0ad5094e43c8

                            SHA256

                            8d397b375fd101b3f87f20d3f071233c0277619beea8532757ecb49911f071ce

                            SHA512

                            91eb21b9c3dbe1ce9c943f36fdfa55e273589f9def567b3354ca3feb19fdbf425b40803e1be0a56160c6b83f7b8d2f3ed17b5167d2380de325b8504bc623a6a8

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            257KB

                            MD5

                            69cf68beae3b9e9e550553aab9f6abf4

                            SHA1

                            2f9d17eed1ae93879e1de641ddd69f0c25f0308e

                            SHA256

                            51218adab1abcfb0c2692f6b3a195699663e22da1f0188f4576587ff9cbf9661

                            SHA512

                            bf09870ad8c28897487bc2e7601cf1e42f230753f9e0377d45f2060db9e322d6525b343a99ca7365af9e923775cce7593462dc5441255e4f23de513a3600218c

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            257KB

                            MD5

                            f6d9b6aa4518bb3a40d566f7a70a3ba7

                            SHA1

                            9170dc5ed11d4020bc712cf976be14128633d735

                            SHA256

                            4dff71debf17130dd5a4c55c1d8a34b76a288a401d1d5fa1c492cb909225133a

                            SHA512

                            3d5937bfc0d40a070c807eefb88c3f8e71d7dbc1d3a4254b934f2a9f4e1eae160b257ea5dab889ca1cfbc41db259964182e1cb532cbcbe700e125cfece88fc08

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            257KB

                            MD5

                            eafc824f90cf99033bc53f586f04fc56

                            SHA1

                            092e3662073bfd4b60f8e626cdbf6d5c3576398e

                            SHA256

                            281c1d027b2bd2611441aa3fddb7b2c4e90bd40488852b67984196281a7eacfe

                            SHA512

                            6036a3494da9d12cb7ccf979446d419c1d85091e70d396e9451e96206dfd47eefd78856a6d2f7a9a7ff173a7b981663ca62ad64dd2ded9729e08fccee21e9ab3

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            277KB

                            MD5

                            3807716127d3f89b31cf3e0c066b2dee

                            SHA1

                            f34091c18abb3279dc8f7cfd86d9c73a770e0fd0

                            SHA256

                            afc780bc0d426822edc7eb270797987d5b57519602f614c1ec562e85dc181a67

                            SHA512

                            ade180808cfde6410c5b25a84b3eb99c224766a39b9b3185f6fb536ee4dfd9165fc16e9dc84b6b021cb7c6607f01fbe64fc89c8a27ec397f4030881db7c2132c

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

                            Filesize

                            91KB

                            MD5

                            716a92b49fd2b79e224764f6834fe710

                            SHA1

                            3f1af687ab9d4242c4e85a4e762304757cbe58c7

                            SHA256

                            fbd97c3e24662c86bef96ee9ba74651cbf97eee75d212f3165cb965881faccfd

                            SHA512

                            fe2e47aafc8e5027194134781168dfdf7bc0cce4c89af0d0a13def01c3e13da9c3d9b578a4e8e6847cd4c4e51ef6905e0694aaf35f41ff6566438dbc4e1d0ff5

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe57ed8c.TMP

                            Filesize

                            88KB

                            MD5

                            aa9e869ca3084c8cc82eab6a6e87b59c

                            SHA1

                            114f8efd862f65ec1601ffc2c0c838f9b2b65088

                            SHA256

                            fb47816689197cc02f0a66831321938e5cef4fbb94c9660bfd8e1757149169a6

                            SHA512

                            b6e6a7e24060f750126b280e52ce7945a40276d363ecabdd6c56a65af624c0409e53f6d003c77a4e6c46cb56945581cf4e8db7dedce9919d95219d8dcc55cd49