Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    299s
  • max time network
    245s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-es
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-eslocale:es-esos:windows10-2004-x64systemwindows
  • submitted
    02/09/2024, 20:33

General

  • Target

    https://brou-com.site/

Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 2 IoCs
  • Drops file in Windows directory 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://brou-com.site/
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1188
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffcbacecc40,0x7ffcbacecc4c,0x7ffcbacecc58
      2⤵
        PID:1280
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1716,i,17665189171951875629,18163375374509605709,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1712 /prefetch:2
        2⤵
          PID:4484
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2168,i,17665189171951875629,18163375374509605709,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1928 /prefetch:3
          2⤵
            PID:3520
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2232,i,17665189171951875629,18163375374509605709,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2436 /prefetch:8
            2⤵
              PID:3424
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3116,i,17665189171951875629,18163375374509605709,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3144 /prefetch:1
              2⤵
                PID:3960
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3132,i,17665189171951875629,18163375374509605709,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3260 /prefetch:1
                2⤵
                  PID:836
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4420,i,17665189171951875629,18163375374509605709,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4476 /prefetch:1
                  2⤵
                    PID:3400
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=3444,i,17665189171951875629,18163375374509605709,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4416 /prefetch:1
                    2⤵
                      PID:4280
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4516,i,17665189171951875629,18163375374509605709,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3528 /prefetch:8
                      2⤵
                        PID:1560
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4596,i,17665189171951875629,18163375374509605709,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4480 /prefetch:1
                        2⤵
                          PID:3652
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4580,i,17665189171951875629,18163375374509605709,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3788 /prefetch:1
                          2⤵
                            PID:1436
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4452,i,17665189171951875629,18163375374509605709,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4496 /prefetch:1
                            2⤵
                              PID:4032
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4984,i,17665189171951875629,18163375374509605709,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4024 /prefetch:8
                              2⤵
                              • Drops file in System32 directory
                              • Drops file in Windows directory
                              • Suspicious behavior: EnumeratesProcesses
                              PID:412
                          • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                            "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                            1⤵
                              PID:212
                            • C:\Windows\system32\svchost.exe
                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                              1⤵
                                PID:1520

                              Network

                              MITRE ATT&CK Enterprise v15

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                                Filesize

                                649B

                                MD5

                                5c02e187aec77fa636c7dc795b56fe18

                                SHA1

                                f6f2510a098cd11e1a80312fc82e1141075ce9cd

                                SHA256

                                7139f5bffd78400c8a09f53403b605074d6b6e6c29ee9e13622e06126fe14adc

                                SHA512

                                b98dc3c5e00bae81580f279bae10f7b8a73ef17a9a630acba2b0e314adcda3a66fd5593753a0ef372770f446374d85b86d8ac9db12a809517efa3794814b41a4

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                Filesize

                                962B

                                MD5

                                4585d5df40b668042900ed2df4916884

                                SHA1

                                af4c1e004f9b1a0459c4e19664f875bb4af88676

                                SHA256

                                65de0dbc356d40cce62ea9eb443e9fa0ca2c82cab9989f07658bd5774b9dd9b5

                                SHA512

                                3c21920ec0be61fc9f284200bda5f62a9dbb7205bf42b7b9d081adae5aac3fe3c2700082bfd679670992fa3c9c96d667b59c6f25dc07ad87e8474bcead4fff0b

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                                Filesize

                                2B

                                MD5

                                d751713988987e9331980363e24189ce

                                SHA1

                                97d170e1550eee4afc0af065b78cda302a97674c

                                SHA256

                                4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                SHA512

                                b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                1e912a234d41ef794d20ed7d142426ef

                                SHA1

                                72cc9e9dcc2dff66fd2ded26d1c14260d073de4b

                                SHA256

                                847920e17c747ac2d55b08f61c925b6297dbfb014f29206e42496f1e93d46e66

                                SHA512

                                e2430ffcac1527b7031aed29e46d5d8af9c2308a293e9481e6f8b7f30a615876e79407c9787b2813b73300f0e5178e298850c976830e366eb35f9a7fa143e237

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                e36ecb2079c5a3f3218ed5bfe9524d9d

                                SHA1

                                1e6bfde196ec9206c53c017e18dc651d8cbfe80f

                                SHA256

                                b9835306a4ee9a46d8ac1a419af44ab7ab032c6ae5dce5ef896db6a5192b9a6f

                                SHA512

                                ef8d8388f0ca50d64d22b8bd2b2ed8cd6b8c03c51a05df7716dcbdc51bd89ddcf0734099607e3a84c5233d176ddbaf7cb83a6118a29e9e67c7de6b0185911c61

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                99b7af4e5a5e66cd8d5cf474e4dac782

                                SHA1

                                03dca1a9c565c7e7a45fa070ec99b99c79970c20

                                SHA256

                                c78a57f24e1bdbfc609fb22e452116b38cc9bc9452f913574811703f0224d84a

                                SHA512

                                cbad44e3444439fe4cff034a3d109360420b5d8733e46a333bcd27a82102ef640577bbc0747aa2e655a201a457ac245cc65398a6627bdb5daa7ba534a5f05cf4

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                f3f7aae8342542472a792dfc606ef655

                                SHA1

                                aca22c88b39658b68d1b41772ed858d0fd648074

                                SHA256

                                01c21cd1b747ffc439dbef43fc7526c91c3ee9eb34bb7486a4bcf192792f631d

                                SHA512

                                2d9c29b3dcfeb8f94fcf9bd7c24a87a1c4269559a0a641dab12803582017a6566ca2e3beb1b08f570e5d3dec0448e4cf6806d509bd528aef5d6339d71fa5cc50

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                6059f1d8017c62bcc0073e85d59bc686

                                SHA1

                                489779cbd0b06a301eed45a7b821b31802464da6

                                SHA256

                                2cec44ab85d0e36b308f830e89645660fc746c1b0a25e43ca0f7459f34ef6a38

                                SHA512

                                d49a2c0b0ab2c0e26aaa484d55bd6b6efce79c1d7e0e2100faadb7e151667c653f8d8376559a40f986b097ccb55d23662fe59b9d9dfd27bc28fdba87c9467fd4

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                24eeaab22fe1cef6802182e2cfe95e69

                                SHA1

                                60e094266ed0c0db11fe70a1a6c2ed51416ae167

                                SHA256

                                2db12aa6dc070a98bdc99dee4636fc83ac029dfe5efaf222fbd2409e21d08fcf

                                SHA512

                                18ddd03f94e1c57dad11c588814bbdb4b534a261bb52f7751c44351da1c9f8a6963cc0bd6f4f20cac85207e1199c6df3700097f7d8bb3f40bd5ca1cfd0028dff

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                33c1f26bd88564ff616e0733354e1ce9

                                SHA1

                                54952d94b1ebf52ac87281742f5b6de4d60f72bb

                                SHA256

                                1c12cd5ded6dd9386d3e636ef52513c798b74b917e8e669de4e74416d4d17d47

                                SHA512

                                d4309c771d6e4d8ff112b20a5323e9fa1be4b1ba8d21735de5e6adab8b320df17a9f4c0a87e0080d06a7e2a528379af51c2720c809e805782b07af220f856865

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                5342bcdb5f9eab1b780e4fd83704f6d9

                                SHA1

                                7799d3378ab1202aa487fbdbb9f03235e6a3537b

                                SHA256

                                875aed9ee7b16953e2f1b06221e9b100bf01ef7dd29225fb8daa95856ee11543

                                SHA512

                                df4a867500644b09f545ba29bd305b3112bed7c6d51af04cbd5c6acf7058ea489008ec27fc803f26983b25be7e10641e0a13fe67b130a30b4f01a9a5d005ca37

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                513e3bcef195541ff8886c8b1026c7f4

                                SHA1

                                0ba470c9ed046331d83e72c77a2f003ea9b91129

                                SHA256

                                43a7943c534c44cd068f0277465067400af9bc31fbfc8af27aa8a15fc6a62084

                                SHA512

                                ff426e41acccee3a46764245877c55f4da80cc38e17f4f5a2cdd9cd5ac1990feaadcf071fd9f9b82674b502edd2a46a4298e672f7002b815fa848594bc161beb

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                de8b1541e75cf7ea46d2ddc8804e86f9

                                SHA1

                                b0837449d65f28ed81ee50bf261c6bdfee84f24b

                                SHA256

                                543fc5a1de625b3abdb4368b6b0a0ff8b815a03b4ffd3942529b2ef8946c1229

                                SHA512

                                1f6464a6e59b7821d2a6d105286085c5d6af658e29e820e60ab411af59494cb074a52e22d8c613c26377eff9a73f76e3c927a594ef39ffc4768e71b9a6158537

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                b00c1c51b5d840d07768339573f12a7c

                                SHA1

                                5d74d1a4377541186aec8c44e734e8515cee2964

                                SHA256

                                438c6e53584749779cce86c472bd614690b01f3292c89ba7dca86a8e6ef6890d

                                SHA512

                                2c42abdbbffc6caedea5d1eac4c8e4959e5bcb061e9107efde41904ea71fc8847c1415032de477e002e7548593a2ca092f395a5dbf28ef813fd1b56dd39ff7fa

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                a383706cf9d7c9e5d102f55a2fcad4bf

                                SHA1

                                dc83d564d0e75fea8223906fd5e9ea3e47f3b745

                                SHA256

                                02029990950ece94746191b8511a62a89e5d345d54787990378a83db068e0c6c

                                SHA512

                                cb4c0facc83587d460a8378b4ee00421ed6799bccf48185ba13aeae7518a54f203e7f696d9b827c80497a3373c7abb812b8b3c4681a79f3f3f60ad4e810784c7

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                3d2371765d75131f7663b11312fe01c3

                                SHA1

                                39665577e14c5ee8450e84f47e0b862f64672bf0

                                SHA256

                                37daff0b3a97c70cf0b4362540576f6bbafcae05083da6fcc5043d9e67581bba

                                SHA512

                                69117ec1319ed3d612d3275cd32623d580be8c404217c7c7dd9c19a00c2475faa3e3e62c6ec23fd58920387d069768e9ca25a4db512ea30c1eb347a195ab7391

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                8b20a5059ecbf9ab5db86ebe12466b5e

                                SHA1

                                edbf701932b7dd6574425ac5f3874e92130743f8

                                SHA256

                                747d7dfddc74f421361e77c79e4f44806fc10e3b306d9ca946019d43ac821fb2

                                SHA512

                                f8dadc301246cbe93dccee3b3afc38c2be12b71e599a467e3cdf689995d19f794895c6e19a07db3e6b8a1e123651a9a688d6275806584dcd448c7efaf5258a6e

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                Filesize

                                9KB

                                MD5

                                e344ff8001c5ffca82e39cf2cac80f20

                                SHA1

                                9db76a161ee170b3b7e742a01078def425f6f773

                                SHA256

                                5dc50a11b963f5c5ef7c6f1c722f4880956c44b8aa704d0b4c0bf91999c3e7dd

                                SHA512

                                76842ac95e8e4335337ff279aad93e5d723cc0e24185b6f38ab0fdf494a5e770ebf6372b1e90dc5fb577325f8a42e9d7f962e2276e9ee5fec1e6a88b8b1eb232

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                Filesize

                                99KB

                                MD5

                                ea4b00418c5adbef08dee7084399aad3

                                SHA1

                                65ed52f380cb4b94f78b8af91031cd66eef9875c

                                SHA256

                                434cb4d358b637561f709be3b81698fe5335d40bdce1b835c3f8ffb9c58484e6

                                SHA512

                                cb60bedb981e971080026f28a4206c583e300eafa050ab7c09434723ed4250f6c37b7ffb43bf57f1e38e29a4ef32d1c96311bde270a17b39b01825d534f55974

                              • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                Filesize

                                99KB

                                MD5

                                fcbfa4d833ec88778f0851ea9dd63158

                                SHA1

                                9b2b36c1fd6bff7bc2326a4d89f7f565727fb515

                                SHA256

                                531d417121ab9ac6f8bb6604d6397257cb916267e9ff7cd2a42cec1a2e7527fe

                                SHA512

                                cb2d988c789bf733aa911b44ca78e3a1f7a0e802b38e85ce7486efb2f3233f90ff9b381e7d8606dd1886630730aafed9811995382561d6e1a69f3668a6cb260e