Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    1799s
  • max time network
    1687s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/07/2024, 10:54

General

  • Target

    @TAP_ME_TO_GET_50K_ROBUX-fsb.html

  • Size

    501KB

  • MD5

    98260ff7edeee445c5dc99228eaf5be6

  • SHA1

    c4cc82c3c187293d804533f4be35cf2b0e412614

  • SHA256

    5bd23edac5ce67be143955bc21d0e9309c25b38358dba4b0d635937f51f804f7

  • SHA512

    e7d84673fffe3ddc2337f6a53441a3b2d68a9b0f8a90b4c413ba15d05d1ec4ce9c301d4116c58d865cc915c60258338173932b12e5e4d489cd2e8c1cdbcc3aa2

  • SSDEEP

    6144:VDmAptAp/ApSApFApoApYApYApVApxApfb8uG:VyA7AhA4ATAyA6A2AvALApb2

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\@TAP_ME_TO_GET_50K_ROBUX-fsb.html
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4172
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb8316ab58,0x7ffb8316ab68,0x7ffb8316ab78
      2⤵
        PID:4980
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1832 --field-trial-handle=1924,i,11575588545931494404,16064896128006175774,131072 /prefetch:2
        2⤵
          PID:2448
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1924,i,11575588545931494404,16064896128006175774,131072 /prefetch:8
          2⤵
            PID:4872
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2228 --field-trial-handle=1924,i,11575588545931494404,16064896128006175774,131072 /prefetch:8
            2⤵
              PID:4032
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3068 --field-trial-handle=1924,i,11575588545931494404,16064896128006175774,131072 /prefetch:1
              2⤵
                PID:1120
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3084 --field-trial-handle=1924,i,11575588545931494404,16064896128006175774,131072 /prefetch:1
                2⤵
                  PID:1108
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=5088 --field-trial-handle=1924,i,11575588545931494404,16064896128006175774,131072 /prefetch:1
                  2⤵
                    PID:1644
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4468 --field-trial-handle=1924,i,11575588545931494404,16064896128006175774,131072 /prefetch:8
                    2⤵
                      PID:2848
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4736 --field-trial-handle=1924,i,11575588545931494404,16064896128006175774,131072 /prefetch:8
                      2⤵
                        PID:2996
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4812 --field-trial-handle=1924,i,11575588545931494404,16064896128006175774,131072 /prefetch:8
                        2⤵
                          PID:1356
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4400 --field-trial-handle=1924,i,11575588545931494404,16064896128006175774,131072 /prefetch:8
                          2⤵
                            PID:4040
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4188 --field-trial-handle=1924,i,11575588545931494404,16064896128006175774,131072 /prefetch:2
                            2⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:2860
                        • C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"
                          1⤵
                            PID:2624

                          Network

                          MITRE ATT&CK Enterprise v15

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            2KB

                            MD5

                            39819f7ef06721a22c0b26f73c358af2

                            SHA1

                            5f45992d99ca2262db12a1bfabc9a98b7a1776fa

                            SHA256

                            e9ba4b50202cce42a54b44671ca4f746b2be2bf0207b4041da3a94cd7a164191

                            SHA512

                            8b9405f067e1e36f22c305411cb3869aeb1525489fab457a7f58e523cff51aace2f40ba159c6d8e452ad75591b4ccdb323f7bb741f09fa6d487314315975184f

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            2KB

                            MD5

                            f08d2a6805c5238d77b273cba2175d59

                            SHA1

                            6aad0ca861bb522fbe12bd81000d76295fa83c62

                            SHA256

                            2a7d1f9fc17489e315b76c23725fd8818b38a3aa15161abc961650a62d1f28b2

                            SHA512

                            5dd681844a6629c0140c91366d388a07ee7e3798da16672d0d16f30f6b8ffdeb744d3d40efa525d04d08604c5f17be853cd7d06c683ab5e6400ea6f3730ff7d6

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            2KB

                            MD5

                            be797a44fa00de61268176a7067b127d

                            SHA1

                            7dde56ac51702f7c9ac407bcbcb977010e7ca381

                            SHA256

                            5d65062452653f5478300e50b238182cbc4a88f405eec4d9deacc15cdd7636d1

                            SHA512

                            7a1213b5974b3f0a188fb5fbd22571d0ec74feb8d946fe2e3925bfd09838d5f45a401497e3db46161231f192a3de7f778eba31eddd4a379e1a14e3c8be8f527f

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                            Filesize

                            2B

                            MD5

                            d751713988987e9331980363e24189ce

                            SHA1

                            97d170e1550eee4afc0af065b78cda302a97674c

                            SHA256

                            4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                            SHA512

                            b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                            Filesize

                            691B

                            MD5

                            10901ce6667ba4da2269eae4e693feb8

                            SHA1

                            bf2a411dfd67c446b9ac1206856a1945a732f8e2

                            SHA256

                            1fc4f8057740a0e5e687563582a5183b77c1e79e5c81bdbb045f31c032957175

                            SHA512

                            20de4db5e2d5c2dd2d08b6778d3275badf5009ee7e59106ddb703dc3c9c33f0d2ba9920648652d95015a306d55c1265d873c906da3da8f8e95cbe6f240b1631b

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\7708f3b1-ed37-41b5-b1d0-d7fa3408ae8d\index-dir\the-real-index

                            Filesize

                            1KB

                            MD5

                            996cffd0134ea11dd5f302e87f8b9b82

                            SHA1

                            ff765e7b8e894bd9757b169e691ff3d550927c14

                            SHA256

                            7cabd73ccc9a831df01b33a01a18a94a0f574b4997790f19852426cbc3a5df5b

                            SHA512

                            8ff905e9de3dbaf638b85fe7401c39d25dd04a6eee8448eb734ad6beef0a9146a847a49a27ca7ac1ac3bc5bc2d76ffff95a0435f6268df44cd01a8c6a7327feb

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\7708f3b1-ed37-41b5-b1d0-d7fa3408ae8d\index-dir\the-real-index~RFe587848.TMP

                            Filesize

                            48B

                            MD5

                            48cd7dc0d7c663460113900c7b0977e7

                            SHA1

                            f484015c857c87034b0f56fcad2b2820f382db1c

                            SHA256

                            0bbe6b237cfab01d64295c1d6b0eb96f4cf32e03da1cfbb25318a6687f2e69fa

                            SHA512

                            1831242339c877a9643b4e491257b033a39d2d1e0a4cc26c8e3dcf764827e3d4db1af7aec7f41e36ed241fe1cf2980aab8bba1d8a5b233e34fe936fb773ce6e0

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

                            Filesize

                            144B

                            MD5

                            cfe4a07fd35cb1713c1b545440cca100

                            SHA1

                            b557e72b9090a75cf7edd34701be9952ff1382fb

                            SHA256

                            14f2f8e2c3adf75818e858663961b5d70e1c244b18b08a0161afaccb1e5dc65b

                            SHA512

                            6b479ccb362dd71b5101cd181862835a34911b0ca8272800838da1e69ee379b6224cac920cd82d39344d36cbab6322f2034be38d68308313b2936036c995e5ce

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

                            Filesize

                            80B

                            MD5

                            edde0d9959accd2481d5f3601e9bad60

                            SHA1

                            5bd0449ee1e16b02db8a118b1e5e7db78f789dbe

                            SHA256

                            00c9b4d4bcb15e5fb5df03d125b559ceb5623e9d6456472c3596f46535502eae

                            SHA512

                            3dd73da8777b77c401f0e2a4f8d12c0042a7749a5d4a301022272fa729ba3a66093b2d9a80697c7722ad68727e60916e1b3bcfeb16398c9cfd4a1165f4fcc3e6

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

                            Filesize

                            82B

                            MD5

                            9943fb2736bc4ed6cb4316cda8260c1a

                            SHA1

                            c7b2b32860947a48ddc6e24def2a6ce0311df1dd

                            SHA256

                            b09ada44f369888cc9786dc6f3525ed23948a7c32ffa06f87ac71155a6d1f4cc

                            SHA512

                            2d640017ce1e0c409f5c57d5fd94dedf18ff3cd89254590cb92fde95329f89c3eb8374f76caf1ea8e0d82e2e927b2d1c16668d7b86299b8cced78a2b12313009

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt~RFe582546.TMP

                            Filesize

                            87B

                            MD5

                            0bdb97092b1817201f9e9c6e04ffafa5

                            SHA1

                            d5a2def7e817392b4fd1dc321a94e57af96a8544

                            SHA256

                            f71f7076a64ac84595bdad0c265e3f084513bf35f163aba43b2640049a958a4d

                            SHA512

                            834afb4d60bd65c00039a01ffb320cef483de7c22820f8ca06f6670c43343fa035927b91c7f0a5b2383183500ae293a69bd1a60343d9455ab5646d17216b22e3

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\d7bb1600-5554-4874-b389-d15cc22622a8.tmp

                            Filesize

                            6KB

                            MD5

                            30d40ab4624a21957eb741261232602d

                            SHA1

                            397e5d5ac3103b37639f6930d0689ecdcc708173

                            SHA256

                            6ac5208ab645590f4f1331ddb91ad2c63283f573488ec5bc1853fedb89f6aa37

                            SHA512

                            117a9574cc0cc0f9c9233b995e101313a3b997762bd15cbdc08aec5b9f789238f939f8cf88e788cf1dadcb01eac1d84d79fad35c080b3736735b4bf45757d268

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            146KB

                            MD5

                            d999f635ee0c2a2f42f3efb27a16396f

                            SHA1

                            2e8c5f269edcbadc9b2fb57904c341893b4ac935

                            SHA256

                            9ed2de0401ca9427e1e5cf666af8dab37fad482e784f98a266762978a32aface

                            SHA512

                            41ef2a78b08e6f9ca005ae2966ba03a417900d90cc9e6e47af3c3a898f51243f579273790c0a934dc46a48283d6ccb80a6bcf85578d98c7d1445f4fa68969871

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            167KB

                            MD5

                            5469d2d9ec4136bd4a8fba6661dd0807

                            SHA1

                            d75d2f60bf06ef66236e14caebdd08611c21b357

                            SHA256

                            98f492cf9bd2828281250bb721c26d0dfcc00c2bce7c5af32120e82c64f47b10

                            SHA512

                            624cd0c7c59e7cbc8269fbf63e772d9dad4a957e77b28de2af633efc8e12275423ce024b7da8493e8a23f7dc56264e007ba02e8650b6dba20c22583ab638fc4d

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            146KB

                            MD5

                            480788c2a9871a4cf80a6988b296f855

                            SHA1

                            1e14e277119afc3fcdd3d1c510ec4d50328382a2

                            SHA256

                            f922ac514ce2d26ff5acc4c224f95c63e3232686b149d69eec186c03ef2a3a2f

                            SHA512

                            af56e3e03cb97e46e8b46cd39d9e77df0fe7cce835d3ef98130ae020e61a75df608db85a813fbc110e06335b79c61c46869ef9df43a9c519b9c441e389b76658

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                            Filesize

                            146KB

                            MD5

                            e1f430d6300afed7ec4298aa65c0c754

                            SHA1

                            66ec850c4b6c426d85335333f38699ad60223346

                            SHA256

                            2c029569f21da2a8e12ba3783ececbe983466d2cfc654d0dc84705f46c9dc3fe

                            SHA512

                            783537b8a282d9905e1f88c5a0c331d4affbeba268ae31fedc7cb7f4bc27710c4bd89c5900fe073c6c182e33a975faddfb6d660f35aded4df5323ab7e640e064