Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    599s
  • max time network
    594s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/05/2024, 06:59

General

  • Target

    https://google.com/

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://google.com/
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2456
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffffe2ab58,0x7fffffe2ab68,0x7fffffe2ab78
      2⤵
        PID:4120
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1608 --field-trial-handle=1876,i,16042347689918188758,16298590291297151662,131072 /prefetch:2
        2⤵
          PID:3016
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1876,i,16042347689918188758,16298590291297151662,131072 /prefetch:8
          2⤵
            PID:224
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1840 --field-trial-handle=1876,i,16042347689918188758,16298590291297151662,131072 /prefetch:8
            2⤵
              PID:5064
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3004 --field-trial-handle=1876,i,16042347689918188758,16298590291297151662,131072 /prefetch:1
              2⤵
                PID:2176
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2224 --field-trial-handle=1876,i,16042347689918188758,16298590291297151662,131072 /prefetch:1
                2⤵
                  PID:3348
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4252 --field-trial-handle=1876,i,16042347689918188758,16298590291297151662,131072 /prefetch:1
                  2⤵
                    PID:4872
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3204 --field-trial-handle=1876,i,16042347689918188758,16298590291297151662,131072 /prefetch:8
                    2⤵
                      PID:3364
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4724 --field-trial-handle=1876,i,16042347689918188758,16298590291297151662,131072 /prefetch:8
                      2⤵
                        PID:4796
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4460 --field-trial-handle=1876,i,16042347689918188758,16298590291297151662,131072 /prefetch:8
                        2⤵
                          PID:2264
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4724 --field-trial-handle=1876,i,16042347689918188758,16298590291297151662,131072 /prefetch:8
                          2⤵
                            PID:2696
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3248 --field-trial-handle=1876,i,16042347689918188758,16298590291297151662,131072 /prefetch:8
                            2⤵
                              PID:3400
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3232 --field-trial-handle=1876,i,16042347689918188758,16298590291297151662,131072 /prefetch:2
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:1192
                          • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
                            "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
                            1⤵
                              PID:4000

                            Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              216B

                              MD5

                              7fa50401288bbba23457d5730d81207b

                              SHA1

                              3713657dfb8b4fc71875eed7c69a68f4dbb978e3

                              SHA256

                              cd6b34387e2b8c884a53d979cc0539e574e48413d91674ec1155c9289f06658a

                              SHA512

                              9158fceb90c200f690ff70433e37e037e9b9042a7cd4b9604a53ee995340c767e24b2908eb9a2e4ac45ed5634fbe313337b03a9b21d740c29168dacbba47140c

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              2KB

                              MD5

                              adcf120da760e02f6d3859193c271b40

                              SHA1

                              3c22bbcd173c43d328700db8b123a3ec0b870ace

                              SHA256

                              8dcc781f25b08c79e5c47e989c0bb87704c4655906d39e66d752b64e87bb0301

                              SHA512

                              f98f78faac90e6ca7a05b753dc7e6cdb7eff4c784ae75acfa38c6a53c92dbfbf0613d7b23b3571e4f93d05eb21b732b08835cd2628030b0de2fb658a38a8e5c6

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              2KB

                              MD5

                              a3885788cc1ccf50b22fab00eda3daea

                              SHA1

                              9431ed2a91311bea018c3ef5fe0e17d1c67e4378

                              SHA256

                              742b790f00c5c5bcdcb7c2e77185d71538e826b82e44e439e180b5c54daf25aa

                              SHA512

                              b61054b9642601e234eea6d3be8be2c711fd31909907308516d0c3bf6f0f1183d03d057dc95cb22803b74efb1dbb8ce1ce1af428d4b7e71e501b9c2dedd33f6b

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              2KB

                              MD5

                              48a8482a2693e2a232b71fa3f21ef2ec

                              SHA1

                              e0f84586ef0222af2a962393b361cfa6129b4035

                              SHA256

                              71eaced5d68e9b65f5e7e3052cd3dc7dd7f7a33e4dec544528c5370e70fda952

                              SHA512

                              1ff3dbbb230297048d50321d29ae938eeeac6031daa4c5a5df49ab01a4cc63d46f93f6c7718292059eca05ed7200d9e4cb115afee3b5bab95de2a37921bef60c

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                              Filesize

                              2B

                              MD5

                              d751713988987e9331980363e24189ce

                              SHA1

                              97d170e1550eee4afc0af065b78cda302a97674c

                              SHA256

                              4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                              SHA512

                              b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              356B

                              MD5

                              4d774f222e27e84221be512c4cfeb916

                              SHA1

                              f2b9463c3dbd35982d7f31604c3a2648b1884b3e

                              SHA256

                              c45f78f3ee62ba9a973ac2f8798b0d1127d943021686cd778e67bacee1fbdde4

                              SHA512

                              c9ad07f0d60f47b929b83cc80b4477aeeed936044c7620b8ce72ef225453bfaececceb2b9c0bab336e994ee58951adf40caf6852fc0b8208fde85ec3733e8d4c

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              7KB

                              MD5

                              ba1f6d7934f12c90606c8873f2bf000a

                              SHA1

                              c98b7b5b8841e801140beea0bd31fd20f5e6c2ab

                              SHA256

                              0e1a4b39fcf66f206f7516fac1af2456fd572acc105db1a0d406ed8197cc4327

                              SHA512

                              cfcf4fc9e7306b6c2c13f97c05c406d7d77b70fb7d8763f7596b7c1895732fa2f6d83674dd99fb63c0e1287f9db39099120fc589a83c68ce2e53fa493869ae30

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              257KB

                              MD5

                              027b6066f244f1861bf5c20f0c7efe19

                              SHA1

                              091cbeb5caed54e951fb10f89e1ce73a996fdc85

                              SHA256

                              6199b913c658084759abee77738a5688bb0db042543f2c279ecb472c8f7e47e2

                              SHA512

                              d1af9e3a12f25141b28e851fb48b94acde684f48f49ee398db64d93bb163268d5cae58c151a0c0ec37c4f270a5755cf9d1fbfa0d3462f3f05e2cbea006e64f31

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              257KB

                              MD5

                              040737dc1970dc4c902b090b1f2f5846

                              SHA1

                              e0e67b850344dd57a4940c3b67a436817a1221a3

                              SHA256

                              c1e4b1b418634fae8280e99c5c4be8add700f88f3d836648a6e01d9e6b54092e

                              SHA512

                              fa05f94bc55f119f2b3de4b5836872d4fadeb7a5bfba4ef3ec83baddd1f14f1fef92cb7778a51ef323feed0571d1f11e775acfec6300d39990c6bd3a16e44ce3

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              277KB

                              MD5

                              037d92c40b4eb71efc0757cd6cfc62ef

                              SHA1

                              4c8b5b738cea7f36cdd84062e262b62748f11e4a

                              SHA256

                              752df5375829cbd707331fa32bdbb163a014821aa4e56a02be171e3bbea4ba09

                              SHA512

                              7bce4107502ef3035096c65a4419e13ae03647f9e91b9cb59933df425be65b2555739357392a5999fc2b5f839c27fe858c6441d1c43565653df15a2919e09f6d

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              257KB

                              MD5

                              7306e84e63b68ba9eaefd88b757764c8

                              SHA1

                              fb6f805625b3b6bfd36f229450d1884a94add473

                              SHA256

                              2c860eda7dff79863b40658cfc4f4a56c4085a85cfc2f57ca110df475a6b73da

                              SHA512

                              b9a749579682cd78d3f21f0b9a04668f6a68f41cca86dd3457f841d92f24689fd13e3365ca506aad22149295c2d83e4f3dd0a89fb8f7ff74b3208dae0cf56819

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

                              Filesize

                              91KB

                              MD5

                              0dc22f44d69c5eb57f2c10e025ca6b8b

                              SHA1

                              4b8237761f97ee26d0ee327af38905447121d3d3

                              SHA256

                              d515d270aa736e198f9ddceeb645004cb491ffcf404ea63ccba8f35d03882d39

                              SHA512

                              2f6febb0af38e820541e5cb972e502e36dd70550501882dca1f36d27f73e19697d36a650ce34e872f81f8fce25034d79cf810f8455635faf97328d9bac0375af

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe57e704.TMP

                              Filesize

                              88KB

                              MD5

                              136a666891760f28d61f22bb46c9a688

                              SHA1

                              0aac1f38af246051ca9889515c4a702ec308e23f

                              SHA256

                              ff59098ecfffc2349cb838b65d8981527baab52fcd59fda054603a537b147d05

                              SHA512

                              c802194bf69b136853b4891697f9546be386ef2283d374ccc7ee7b2134a720ab2d24ed5506eeb7f198742c12e91ad8f3fe0eeb729935cc638ecf065464bce5b8