Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/09/2024, 08:50

General

  • Target

    https://chatgpt.com/c/e74df29b-0fe2-4cab-b48a-e26097330b5d

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://chatgpt.com/c/e74df29b-0fe2-4cab-b48a-e26097330b5d
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4132
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffd4907cc40,0x7ffd4907cc4c,0x7ffd4907cc58
      2⤵
        PID:3952
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1908,i,15119472939471922642,16987078946623302411,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1904 /prefetch:2
        2⤵
          PID:3864
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2032,i,15119472939471922642,16987078946623302411,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2112 /prefetch:3
          2⤵
            PID:4548
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2236,i,15119472939471922642,16987078946623302411,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2500 /prefetch:8
            2⤵
              PID:3284
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3120,i,15119472939471922642,16987078946623302411,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3152 /prefetch:1
              2⤵
                PID:3192
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3128,i,15119472939471922642,16987078946623302411,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3260 /prefetch:1
                2⤵
                  PID:3380
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3688,i,15119472939471922642,16987078946623302411,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3680 /prefetch:1
                  2⤵
                    PID:3736
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4652,i,15119472939471922642,16987078946623302411,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4648 /prefetch:1
                    2⤵
                      PID:2760
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4012,i,15119472939471922642,16987078946623302411,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4792 /prefetch:1
                      2⤵
                        PID:2868
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5004,i,15119472939471922642,16987078946623302411,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3144 /prefetch:8
                        2⤵
                          PID:3612
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4680,i,15119472939471922642,16987078946623302411,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4428 /prefetch:1
                          2⤵
                            PID:3248
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4804,i,15119472939471922642,16987078946623302411,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3148 /prefetch:8
                            2⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:2184
                        • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                          1⤵
                            PID:4584
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                            1⤵
                              PID:5048

                            Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                              Filesize

                              649B

                              MD5

                              ee0183a2eb29281a367e962471204a4c

                              SHA1

                              dcaf7cc9771f0c38b07b4126f42bcc1698507ead

                              SHA256

                              5db1d4445e853e8482d43a900b7ef856fccf24fae1f18e751606b34fd629eaa5

                              SHA512

                              658924a813bd4b376cac378c583f3aa4725fb2be07867d75a357cdb954c147d2c7eb2c581e9286c3022e3eedcec5aafbc6da686b7d99fbb28ccd8ea2477134e4

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              1KB

                              MD5

                              727c2bf33b554844349e867b6e3caf4f

                              SHA1

                              703b547f0931a7154efacf84bf06fb45ff6e2f4f

                              SHA256

                              0c7fbb4d636db4045138060ce3b9779887dd30b5ef15f92c6df0f01fb8e81e44

                              SHA512

                              ca860d7129cf3aeec4427ebc240bb8cbe2e40f1531c8123cf71da07637c1ab0aae706a593ffcd6a0b1b1b0771928d248cd015a46f5074a4529d7633e9eb5443a

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              1KB

                              MD5

                              0632d84eafefb3f644791d1eb2111438

                              SHA1

                              67d3bc983367addc1c795fad1dbb0e2b8383bc1e

                              SHA256

                              e843f376072ec914a804a82c807c33811a4407387aa7836f32369724bbc2ac44

                              SHA512

                              e1f86a8bd6d41a729646572cbbe93a8ba4f652cf541b621b426f96de927ec557f11648f3d9162f1fb65d705a0608d8e618af6ec1a5667850f72d83d9c2b30227

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              2KB

                              MD5

                              849a7a94462bd8967956d57476114feb

                              SHA1

                              c58e4c9fad6a41ccb7a7d27f5bad96cef1599364

                              SHA256

                              0fa9cfc19aaa66cbeadda94ef798908f3d46521ba79d34531e48aa6b52616866

                              SHA512

                              57e7081995856e9e0bf64c73861d8f83d361d23c4a22e9dc4cf9595e5520a3f241245f9cb1c9d4ab8cd853131f0e405c36130b136aa5a4436935b4f41a57b1bb

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                              Filesize

                              2KB

                              MD5

                              053b88cd38be4474bd3b2dc30a091694

                              SHA1

                              400bc5e61aa1e04bbf0060fa92ea8030bdbcc904

                              SHA256

                              2c8eaf470887b545160b8cdde710016f051a976bb2a68b437a44e98aefa451cc

                              SHA512

                              8d0447d9b6fe4f6aab7100b2db120b4fc20a63884eddcbf9bcbfa18727a48cfdfc45d57cc5ea70e2fa26235c5d03aa254365242ffcad3d2ab9951c568ac94d74

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                              Filesize

                              2B

                              MD5

                              d751713988987e9331980363e24189ce

                              SHA1

                              97d170e1550eee4afc0af065b78cda302a97674c

                              SHA256

                              4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                              SHA512

                              b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              855B

                              MD5

                              7525ba920ada05c398dd55c803c3202c

                              SHA1

                              4f8a1c23597c7fc4d191962ca637d52be32c17e1

                              SHA256

                              400ed071db297374b1f4ea51c9949a14df78325369e616efdff698bc9d075e15

                              SHA512

                              c2d7890fff6e8ab6868b858b133a29a464ee8ac69f9ffea4fbb8dacfb7b85d917905770b5ce980ecd57509434a987ea263b134c296eff8e625811f2999309c62

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              855B

                              MD5

                              5756e18b35c9712f83bd91067f3edcdb

                              SHA1

                              37627bb7c987a4b42678dd832e1dec26c8e78084

                              SHA256

                              7ecbd8f75ea2f5ae46c64a895cc06379141af4784d7d6a23d7eee368c1c25e6b

                              SHA512

                              fd994a554cffcee2443e85f6ecb3d08e6d7ab1a8b83e59b7911604ad1cd03fb0ba8995d9c5bce90f3c2324097ee718a79754633243dda7458157ea01f5d56ebf

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              855B

                              MD5

                              60bf5f1587a8e0faf52261d783db2b71

                              SHA1

                              bc2a53d0b95f01da5899451fc4bfc9bd4749334e

                              SHA256

                              966d5d77b5a3f7a6f3f0344cea6aadc1102de54dbff598f4b32dee4415ee7380

                              SHA512

                              411db5da04b47a156941b09df9b7b4b82d40fd9115355024747d132fa3bd1236b37a94130268f714542c3a37e0e6bc1b05cf65419f4ce6d563897c3462b6abc4

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                              Filesize

                              855B

                              MD5

                              ce2ecbdbb1d3914edad66d722258c75a

                              SHA1

                              4d4b29c00da959a3ceeabc105efea07b2b30eb8c

                              SHA256

                              8c8a219cc22572c147fbc3aa857cc64122f9c2a20f6972acdc912fd6237e38b5

                              SHA512

                              3f3a35d8d44fb1f46a194ad6d4cd1d96024d8f051b0bc0df888da0e78c1a7cac8ca24a5f44bd598e6f46632c5d7739d9ef6688f9155800225002c42ab0769e50

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              0b11cc57443220f3f23535273a5b2271

                              SHA1

                              ad5de656cda31fbc6f0d314776862912fd9af635

                              SHA256

                              772010ccc32c8ebec09e75a5362be91999a256608ad37709ab216d943018923c

                              SHA512

                              e1198d66c7d915e78bdebcaf94697481019afb868679ce063cf046fa6705be4bdecbe08ebd2db7e84aa8e884c36a93b46619dcfc8d7a0876bcbe2a29ee52c051

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              e795ae7f2f71601d6efa754b9cc567a4

                              SHA1

                              a062cacec6e251d5043edf531d464471ca2b5693

                              SHA256

                              5fdaad74935f0773b06dce6cbf5a5145cfde5ac174cd12e3d030c34e1014a565

                              SHA512

                              b7a949137170bc6c2a28d46a88810b4704bf996530d30b5f3140cbc2d2f63ef3d5c4be763924b92c7e697ce2b9ce324791455d34d84a853bfc7108522b53deba

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              cef6f015ccb0c3534c09d4aa7885b582

                              SHA1

                              6abc7d94b506aaf78f37d786b82cbbb887c5ba69

                              SHA256

                              933e44a159d37fa10774059801a4af7abc81c800083a5002be0b8a3e4928ffc9

                              SHA512

                              509c9dd835c6a61487e139f55d5fb34661a97b2723954e28dea1dd234034b9a5b75ebbd3ab9ba7f5642224e24f8ca39f0b81d9c6edf217ff930a9c13a48e561e

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              c23e5869e61b7be46e65e792975d7973

                              SHA1

                              c8f122c249d35aa6af4f4969dc8de7f56a78dbce

                              SHA256

                              35fb906a1374149e1ae878948816d930f1dceaf25e51e82760a3c6a4deee59da

                              SHA512

                              26cb68bd98f947962e0d0e9bbe0065e4d169533f4a2ce165ea690d8dda2cfe0a841c28d144586f4bc36b84790255e533c3c0c74a29a9d151d29c7ecd0d66ae60

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              c96e7d000dea56bcc32f30a6b35ea066

                              SHA1

                              c19ef2caeb58685cdb5b10e9b50ec7c9168b292c

                              SHA256

                              639d42e0ae64cbe0da7526d3d036d57d43116a1b9eae65e046ad9c2036370e37

                              SHA512

                              f000f0adda53f624bdf5222957068185e09bb35c62ef574567c06a974e2e9ef927384c57b27b6936d477e4dd591115eb0d0346f27695426f7e984e1307da3230

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              e390086e6c5ea90177751946b0856df1

                              SHA1

                              a7f6d8dba3973ace53d5dd4a41df93214c72d37b

                              SHA256

                              b1a2f51202929d6e49470d2ae3ccd5a44e2ddd857ff025879b9b7a8594e18b95

                              SHA512

                              bb55ad20983c2e9db516a9f037ab3fd1f88d0f0747393cfae77e4dd7d6da05130f1f531d9fd219efd3530680925df4a6162fafe1d74bf9f7f95e6dc4042506e2

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              e0277a207c1770d58e8a9dba01e4039d

                              SHA1

                              21166436198a30dda61f604c33f2f15724d4f578

                              SHA256

                              4375eb57ce6f52e2194cfaf851ec5f7ba551ceebe4ea2abbd17c53a4dcd8e62e

                              SHA512

                              234940f661e1c5cb6424264e3dd5b625f3038697b40812ab04cadd8d41c1aa4c2fd2fce0f5196cb4e7bb5c77c98ca4f8ecde202dbe347f08ef6078a96501a118

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              5e08497f9d261feda137229c13aefe28

                              SHA1

                              d7cb9d182b80b2af1d3ee494fbe0cd3bd9eb2ad5

                              SHA256

                              072b4383e158c4975b3677c9d7f5b59b479e208d3f8adddd6cea39b942dc33a6

                              SHA512

                              32c46c5bd46fd86fdcc34dff652924f5ed7a9bc378409717cad648faa685365b151085b66595fc7dc692fc2e14f5df95a11bb6a7cd7739eedf4e784304821110

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              f53a658101bfb5823a353ab299ed2601

                              SHA1

                              5a43655a16e5550c10c75c1c4599a79f5bbb0002

                              SHA256

                              f80be9b018160033d3f652dbdcfae497a019c5a42d30005539c20ade1bf5e47e

                              SHA512

                              34a41339ccb24eecb755be57f60ee5b152b69c99ab3697eed9b0ad1c3c4fafade62566af7e7e90a7abe472333a3b2532d62f412d43b303214bef0a4f25e981f5

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                              Filesize

                              9KB

                              MD5

                              f7471d10740a4810d3ffb0a06bee36a8

                              SHA1

                              f98c61a31f45fff6430423f3457d0e8af02c7574

                              SHA256

                              703c62086799b407b5f4a7e70a894d6ed19484c27b5f0c7a695d7ee633b04db8

                              SHA512

                              30640d6a214876458bbcece99ce98111d50781aecc35e47ee41a42d6642723ed0b9c75a390f7395ce627e6b2c47b956a8743fb5d993b46dfdf290ebe3886716b

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              99KB

                              MD5

                              dc943a8628638f7693f30d78b9c45258

                              SHA1

                              585195e05aaeab0dc0e6a26e20dec050adb454e2

                              SHA256

                              dec276f4264012464d11ee760638eb3821143863800dc0181b808be17e9da852

                              SHA512

                              520aa56518f1737062d104a1c498af5dab410ce69816502a1dac19c5141771cc46f34f3627443ea6ff402c1724380c7b97a20fbcd602208db573b1c21d6e8d06

                            • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                              Filesize

                              99KB

                              MD5

                              7be2a42e68de4fb8a4410edb75f1080f

                              SHA1

                              544e7fabf307c47f322851afa26a389777156b70

                              SHA256

                              923333fa0c147e37d427a8752b6747bcfccc793743e6d2c9eebb5b171454de82

                              SHA512

                              5ff3632c6b21f414a1dc7470d965bef4222d3d622687dcccf04354ff76de733ae9a995e142c94b5d1fa82e9308f9fd3cddf4172a023ba5ec75bc58dcd00a7495