Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    41s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    09/08/2024, 21:07

General

  • Target

    content-scripts/main.js

  • Size

    90KB

  • MD5

    9d84c6de0355531eb452d772943483ce

  • SHA1

    31f1eba7333974599ab59c49ca0e7a1ba2f5b047

  • SHA256

    013facd01521844aff841c06e61330c63f0890c7d813abfe5f7e749b0fc7665c

  • SHA512

    efd220ad116b137e0c4df3abb3504ae847d2d4295ff5426ffc894fa79b9e3070db955deace9519789523f0557aa418b19b7424e49ae6f6bc481ba11683e967b4

  • SSDEEP

    768:sESZg3a0UoN2CbAOvMmuzOf+AQEsnxnutaD7wY1O7pcR7KMFpLe+YuHfn0GJ7vL8:sESdS2jOEVOnCwI3V8OWDlfjn

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Command and Scripting Interpreter: JavaScript 1 TTPs
  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 58 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\system32\wscript.exe
    wscript.exe C:\Users\Admin\AppData\Local\Temp\content-scripts\main.js
    1⤵
      PID:3016
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:2684
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6e39758,0x7fef6e39768,0x7fef6e39778
        2⤵
          PID:2892
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1144 --field-trial-handle=1312,i,17019771990884882825,13995603974758379240,131072 /prefetch:2
          2⤵
            PID:2636
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1340 --field-trial-handle=1312,i,17019771990884882825,13995603974758379240,131072 /prefetch:8
            2⤵
              PID:3040
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1520 --field-trial-handle=1312,i,17019771990884882825,13995603974758379240,131072 /prefetch:8
              2⤵
                PID:2800
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2268 --field-trial-handle=1312,i,17019771990884882825,13995603974758379240,131072 /prefetch:1
                2⤵
                  PID:1484
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2276 --field-trial-handle=1312,i,17019771990884882825,13995603974758379240,131072 /prefetch:1
                  2⤵
                    PID:284
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1164 --field-trial-handle=1312,i,17019771990884882825,13995603974758379240,131072 /prefetch:2
                    2⤵
                      PID:2212
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1428 --field-trial-handle=1312,i,17019771990884882825,13995603974758379240,131072 /prefetch:1
                      2⤵
                        PID:2320
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3652 --field-trial-handle=1312,i,17019771990884882825,13995603974758379240,131072 /prefetch:8
                        2⤵
                          PID:2568
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3656 --field-trial-handle=1312,i,17019771990884882825,13995603974758379240,131072 /prefetch:1
                          2⤵
                            PID:2256
                        • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                          1⤵
                            PID:784

                          Network

                          MITRE ATT&CK Enterprise v15

                          Replay Monitor

                          Loading Replay Monitor...

                          Downloads

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001

                            Filesize

                            210KB

                            MD5

                            48d2860dd3168b6f06a4f27c6791bcaa

                            SHA1

                            f5f803efed91cd45a36c3d6acdffaaf0e863bf8c

                            SHA256

                            04d7bf7a6586ef00516bdb3f7b96c65e0b9c6b940f4b145121ed00f6116bbb77

                            SHA512

                            172da615b5b97a0c17f80ddd8d7406e278cd26afd1eb45a052cde0cb55b92febe49773b1e02cf9e9adca2f34abbaa6d7b83eaad4e08c828ef4bf26f23b95584e

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                            Filesize

                            168B

                            MD5

                            2dbca1a1647a5c2ab13b2503f2a6c6c0

                            SHA1

                            8bbfee412369d8465859b8419211a00f62fae68a

                            SHA256

                            3670b7584e15ff1426bda740193377097d9e85287efa4adb18e544e4fa1bed93

                            SHA512

                            3fe6f8924a4808acfafb6773d61a68e133d4207b7ac5a42c3549535686fa2c686b01535eec159ecb4bd5ce96454313978d241555ac5697943b721d01e0396f65

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                            Filesize

                            168B

                            MD5

                            061980a180ea50065b244f63b42736b6

                            SHA1

                            35d07b9995d7677d8c958157cd756dbbe7391e3f

                            SHA256

                            0c0ff21e36469ee8d8060be75fe6ef2dda00bfce4eb03440525d6a5a6860c270

                            SHA512

                            da388a85b3274aed4b89d58d4c49a0dff2449b39f84a7649374da34f449d652fd4194fe47b046f567fa9f608b863f8fabf132463958dd605f0be6534d2231898

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp

                            Filesize

                            16B

                            MD5

                            aefd77f47fb84fae5ea194496b44c67a

                            SHA1

                            dcfbb6a5b8d05662c4858664f81693bb7f803b82

                            SHA256

                            4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

                            SHA512

                            b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

                            Filesize

                            264KB

                            MD5

                            f50f89a0a91564d0b8a211f8921aa7de

                            SHA1

                            112403a17dd69d5b9018b8cede023cb3b54eab7d

                            SHA256

                            b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                            SHA512

                            bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                            Filesize

                            1KB

                            MD5

                            4ac97cc542352bf1ae50bb0e65691a8c

                            SHA1

                            864e36ca9bb2e99b09f4e0e13ccfbf40cc333c7c

                            SHA256

                            c5d7106577022b9cca2f28472155a3d626b2ecc8dbe62a40fc10f531c50eef02

                            SHA512

                            d364e9353d94df29a5aefff6737fff89842db62f54b79d54f52c9148f43496198581b90c4af06869a10dc85dd1414ceff04747ac8c027220278574faab13370c

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                            Filesize

                            363B

                            MD5

                            7eb10e5c4d3b0cae28f96d73b027a60e

                            SHA1

                            fbecd21e0145f1f9852cd0045c32ee246e764098

                            SHA256

                            1bd43c30e5d8a075114568e64b2d5fa7311899ad32fb93bc153bbcfa98bb78d4

                            SHA512

                            75c19866ed1c77e014ca2ef260a964a40110c87976ba38217aed9951c45202905e2771dbc3d3d67b09a87d4de74054ea350df7b6bfe766f2ff8c25e78137055f

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            5KB

                            MD5

                            d35cdef16fb83266778c23a0c6786a70

                            SHA1

                            343b3a3eca0d04d9a127e212734a17a6927ef942

                            SHA256

                            bd272629ff42c1ecac542e98c143ee65e3423a0affbee538a6e4008bbc9c43b9

                            SHA512

                            0eb0a69e230a4132e885e39b6c54ebb0328ce82fec938392f63319a8cc94d2a0d862e676a0b42e3d708fd4006b74e8b2585c8e4ebdcdcb5194e077fe0bbb2e79

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            5KB

                            MD5

                            d51089598b26a03b8a9977607efd759e

                            SHA1

                            81277aea4db26500d7d54507857034a1b4110376

                            SHA256

                            9e8bebdad0258415663be9e295ffa5dc5992fc03045afaa438403b685be1e21c

                            SHA512

                            12256e93befef45f552537d777eaaffa46d5b22cbb3bf28f4a744c11a9ea0c7543a3d799d05a55a75077779f9003d068b656355f7a31af199f6aa6d40f9b949e

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                            Filesize

                            6KB

                            MD5

                            a3673198b8211030e553a23b418ca4f6

                            SHA1

                            06b7d8a422eb9692bc877a92c9a1e18d7f7be6f5

                            SHA256

                            b722160b5aa74096d8cdcd3b6fd0bee14676aa7076282eea1c16391a7e3a55f3

                            SHA512

                            e964c52e9c200cf15bd8b1368efc47efdafcaadae7d37f35b696e9cf45966008cd7036ae400bdc9a518741446cd3aa4d99cb2d678d977431721fbacd4069f90b

                          • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

                            Filesize

                            16B

                            MD5

                            18e723571b00fb1694a3bad6c78e4054

                            SHA1

                            afcc0ef32d46fe59e0483f9a3c891d3034d12f32

                            SHA256

                            8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

                            SHA512

                            43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2