Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    69s
  • max time network
    69s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240730-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/08/2024, 12:19

General

  • Target

    http://unn-138-199-2-51.datapacket.com

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://unn-138-199-2-51.datapacket.com
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1080
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9e06ccc40,0x7ff9e06ccc4c,0x7ff9e06ccc58
      2⤵
        PID:2632
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1940,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=1936 /prefetch:2
        2⤵
          PID:1644
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2164,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=2184 /prefetch:3
          2⤵
            PID:2752
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2244,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=2444 /prefetch:8
            2⤵
              PID:3280
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3056,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=3096 /prefetch:1
              2⤵
                PID:4828
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3060,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=3212 /prefetch:1
                2⤵
                  PID:1384
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4492,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=4508 /prefetch:1
                  2⤵
                    PID:5060
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=3336,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=4432 /prefetch:1
                    2⤵
                      PID:4836
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4736,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=4748 /prefetch:8
                      2⤵
                        PID:1948
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4604,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=3844 /prefetch:1
                        2⤵
                          PID:1932
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=3764,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=5020 /prefetch:1
                          2⤵
                            PID:3500
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=4852,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=208 /prefetch:8
                            2⤵
                              PID:4836
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=3068,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=3112 /prefetch:1
                              2⤵
                                PID:2656
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=3420,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=5172 /prefetch:1
                                2⤵
                                  PID:3248
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=3428,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=3832 /prefetch:1
                                  2⤵
                                    PID:2180
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5180,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=5152 /prefetch:1
                                    2⤵
                                      PID:4160
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=5168,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=5100 /prefetch:1
                                      2⤵
                                        PID:2004
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5532,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=5512 /prefetch:1
                                        2⤵
                                          PID:540
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5256,i,629915911541344616,14120082124080279453,262144 --variations-seed-version=20240730-050116.493000 --mojo-platform-channel-handle=5092 /prefetch:1
                                          2⤵
                                            PID:4180
                                        • C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
                                          "C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
                                          1⤵
                                            PID:4568
                                          • C:\Windows\system32\svchost.exe
                                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                            1⤵
                                              PID:4772
                                            • C:\Windows\system32\AUDIODG.EXE
                                              C:\Windows\system32\AUDIODG.EXE 0x4e8 0x4f4
                                              1⤵
                                                PID:1708

                                              Network

                                              MITRE ATT&CK Enterprise v15

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                Filesize

                                                1KB

                                                MD5

                                                9372502154fadf857826fe48486bd267

                                                SHA1

                                                77491478519663bfdf82bf11815287c8935fbf69

                                                SHA256

                                                8f269650663ea47518a29becfa925f5b7acbc9110384e2dbd02b275fe26d5bf3

                                                SHA512

                                                6dea7d866c98dacc3eb9a1e167e018232840ee5b3a53ec0dcd23d71a6cd00d3ca0d5eeed0be77126d476fbc3f07f2778f8776bdcc251c58b3449ee2a621c1922

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                                Filesize

                                                2B

                                                MD5

                                                d751713988987e9331980363e24189ce

                                                SHA1

                                                97d170e1550eee4afc0af065b78cda302a97674c

                                                SHA256

                                                4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                                SHA512

                                                b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                Filesize

                                                1KB

                                                MD5

                                                42fbc8f763c654f9c7a46b319c733147

                                                SHA1

                                                6bd7ef2e57b45975344c83d1794f5a0e811ea3e1

                                                SHA256

                                                4a530ad1b630cc438ab3cc264bfdb8d93742cf916ff1d81a790594a14641cef3

                                                SHA512

                                                56af125d1bd047c589468cc4cad42ab8b27a93f3bac595485502b85d6fa7df04b37d6a77a495acf742c3f991a81dec3d5e215c29cfdb4a1f45fdc9fb9595396c

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                Filesize

                                                1KB

                                                MD5

                                                d5ad85c4d955c676c6ed669e91014e9d

                                                SHA1

                                                b93a616f4db5f8b7c068355e415edc6fc154e54a

                                                SHA256

                                                2ce0daf562f8df258ffac7802251b48a2b7f7712542e4ceeb0237154fe341588

                                                SHA512

                                                f3fba6159dbc1e40a72b5acde93b569f0556eb8d5918fcd1d4b89299e59d3e7c64d08ee6d9c8ac0919c90b3a7834a469b12ef0958ded83c8f003fc9cfebfda33

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                                Filesize

                                                1KB

                                                MD5

                                                4af4b41e9d4cc8f57e967b50eab91260

                                                SHA1

                                                4c5799d7b3d174510bc5abdfd702c963e6ce5b1d

                                                SHA256

                                                2aed250a9169bd73bb83cd81e0ed3e5b1c0203ad2665872d958a2cabca259673

                                                SHA512

                                                fa769598f8650469906d3ed504e6be5fdba9b7b9ba327fed16d475e361de4e2715e9a553d6a68b412e9417f419a5237c0db968812dfec0be653e22055bf9520b

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                9KB

                                                MD5

                                                1439b557decb6bbf394156f6cf771f2b

                                                SHA1

                                                93d4544b1e524f31b40cbe04e88575d6bb2d15b2

                                                SHA256

                                                cf90dba006250a8a5d6cb45cfa4073da4648f02f3aebe6dd6e7f44e133d2344a

                                                SHA512

                                                92d7bee4efad59bdae0908e30261013581376bb730fec88982c27b818332b463680fb587cf7abfa918ad4ec98d8defdbbd15b5699693eadd3d4f9503501007a2

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                9KB

                                                MD5

                                                8503163a3e16519abba8c47fd131b25f

                                                SHA1

                                                1d1fd8b5957bea0898631b951f5049a409fb1ded

                                                SHA256

                                                a53ebb20f663eb378eec814d4b8aa8be85bcd0ad26d02d3d7c8f020b90c73f9d

                                                SHA512

                                                3002cfe62bdc035de17c384b7e3f4ab3c3b16c6f904f931909cc233cf63873541ada60d931441b6b14deaea2ac11fe4b00e26c08de0e4bc9cede549253a532f6

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                9KB

                                                MD5

                                                571ff8f403eb08dd04eba591824c1e9b

                                                SHA1

                                                9464be5f2f8e5472c955395efa1d60fb1d872f80

                                                SHA256

                                                e9ad74e674cac12c3ba7b4b72b6fb5f92cb7d9a4f3519aecc5fd70971c80397e

                                                SHA512

                                                6575358faa7a58492f9850a04002cc6a2f02b43234e5c97a6c1006a333839df7af4bbace67c7a848f3cab78572a791f9db2ac70febed890d13232848ab0271a6

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                8KB

                                                MD5

                                                24f618630ccf16776dc261bffd1f62e8

                                                SHA1

                                                8370777d3d4110809a924e080690dc85c92abcd8

                                                SHA256

                                                16fee56dbf118349c008ebf133e83830beb219ce64715df60d761749c426ee11

                                                SHA512

                                                ab1a738f9f2883dbfd545111d287ea62c2f1f92568ef19ccf365173073fe33cbf6f320e3688063a85476a2b272efaffe68b660320331c0ecc8a02f72a2ca1a40

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                                Filesize

                                                9KB

                                                MD5

                                                8a889bffb5de9c0205a0307114b57f4f

                                                SHA1

                                                24304b11ce7eee0c9509c2cec2afa94c39f41880

                                                SHA256

                                                8aa1beff901c84c24cc4d1446d6a8649dc797a5ca0281ee0e3a3de598b8f9bba

                                                SHA512

                                                0a8cc2e0c49042692a36cbd286ab74cf8ce8d915c8ba1e407873639a061e2112310f30e2be4716edf0e97cc850aca83b3858cdf186e60af7652d036a50bf4b29

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                Filesize

                                                100KB

                                                MD5

                                                e816997408f52bd97637efd69cdadd2c

                                                SHA1

                                                298ba727d4b828dc70abffee79e4e4a0ddf8d8b8

                                                SHA256

                                                1485cffb4c03f4548f12bbd09ed0615511e58ad41748b5c383f16da9d938abe6

                                                SHA512

                                                553cd25b80c0f50b6ddbd2c89cafc310d999082d853711aa87a8c59e701027f3ba746914ad5f0efec6a4eb4b528706ab70a7ad5b5fead75de00ced79790a5af9

                                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                                Filesize

                                                100KB

                                                MD5

                                                038cbf2db61c05185d1dff79a592aad5

                                                SHA1

                                                66004cab243e8c4d7936927942c4f463b814bd8a

                                                SHA256

                                                ee030688389f8c78507230d0bc8589ed8b5852e496cee1b44bcb20d2fcbf6cdd

                                                SHA512

                                                007e92918a0a78252f142b68e74b8e6029f64e059b601d2be185ad0a45b7cb3feee57e0c63d66db6bb48103f102d59d2fa0afe584df0f7df9490f1c424d731e4