Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    299s
  • max time network
    290s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/09/2024, 09:53

General

  • Target

    http://merakimindsindia.com

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://merakimindsindia.com
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2304
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffca8c5cc40,0x7ffca8c5cc4c,0x7ffca8c5cc58
      2⤵
        PID:1632
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1952,i,13811209742312336492,7590044915801943751,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=1944 /prefetch:2
        2⤵
          PID:3792
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1936,i,13811209742312336492,7590044915801943751,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2120 /prefetch:3
          2⤵
            PID:336
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2224,i,13811209742312336492,7590044915801943751,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=2460 /prefetch:8
            2⤵
              PID:4392
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3036,i,13811209742312336492,7590044915801943751,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3056 /prefetch:1
              2⤵
                PID:4072
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3048,i,13811209742312336492,7590044915801943751,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3100 /prefetch:1
                2⤵
                  PID:1568
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4004,i,13811209742312336492,7590044915801943751,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3848 /prefetch:1
                  2⤵
                    PID:1204
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3328,i,13811209742312336492,7590044915801943751,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=3296 /prefetch:8
                    2⤵
                      PID:532
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4836,i,13811209742312336492,7590044915801943751,262144 --variations-seed-version=20240801-180145.014000 --mojo-platform-channel-handle=4848 /prefetch:8
                      2⤵
                      • Suspicious behavior: EnumeratesProcesses
                      PID:1428
                  • C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
                    "C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
                    1⤵
                      PID:1100
                    • C:\Windows\system32\svchost.exe
                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                      1⤵
                        PID:556

                      Network

                      MITRE ATT&CK Enterprise v15

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\752ceb7c-32f7-48d2-b775-21fdf4e127c9.tmp

                        Filesize

                        9KB

                        MD5

                        56bd80c2dc0c5b4d0cef8f389519b438

                        SHA1

                        df67370859edf4c10f15db65ae10c6c7d9009ff4

                        SHA256

                        6a7b3eda7b9ca58ff4a9f74ee739b5603df38f465adedcb77b5ed3aca2a54434

                        SHA512

                        ac42540fa7533e15293ac7bf302de6446ac45b29cdc3dd817ad460bff962fe5690fbea29372262860412aa1af03518317fab0cc432c1b8ed63be26354b054aeb

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

                        Filesize

                        649B

                        MD5

                        271b8ecbb56350c07ddcce5a339d23a1

                        SHA1

                        6e6a7ec408aaa2c400e9a281023cf36df6522f6d

                        SHA256

                        dd177f15db79be6c1b209b4560cb111a37e756de90d288d4edf06bdd393c6b58

                        SHA512

                        5ae699132c5719b698fdb183d7acfcf17185863f235fb36366c17870984256bf7bab12efd3513f0a2d9b360695779f6a2fc1e53c62edff5d15266be148e2a5c6

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                        Filesize

                        1KB

                        MD5

                        676de7a56e61122ced764e3c5ab43da6

                        SHA1

                        b1c800a182ac23e24beb17ef61ad489f743e4493

                        SHA256

                        1998bffa128ce691e454828c3db57c783e7da855ec9b72361abd47e83e45b730

                        SHA512

                        2efb0cf0ef906b2f12e05633f07471e9d255053557e143129138a34977e98b055019219594a2016b6485e26b00add4ac2d59c252822ad2d8b9b60a9605defe17

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                        Filesize

                        1KB

                        MD5

                        60b576bcf1cd1e5565ea91b50db74bee

                        SHA1

                        6091ddebfb3c9502c39f71470eec4f9d6aaff46f

                        SHA256

                        934969acf6991be537943aa351706b8b04a457846bfca8118e10acb33e1229d1

                        SHA512

                        74fc99b60299e8c35b3a4da564de9d15f496c9bc537d3892056baf739d43720b25e6a10055b8a90088ca8dbb79dc5eb3294e59ce349e41e70d73ca8ca3308b1c

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

                        Filesize

                        2B

                        MD5

                        d751713988987e9331980363e24189ce

                        SHA1

                        97d170e1550eee4afc0af065b78cda302a97674c

                        SHA256

                        4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                        SHA512

                        b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                        Filesize

                        691B

                        MD5

                        9529686c586994e4d053a10816f7de92

                        SHA1

                        3670a2e93df8f428d3f188c510ef5719e307eeb7

                        SHA256

                        6acc37dacf70c3e5d7db573c33da60a244165e0cfcc8f459ef84437dad9c5657

                        SHA512

                        22dcc86afa53792cf71f5c80140e1850752f90e5aaadae6bc28508188776d28f9b0c2f386b7bfb5df06d5e8964f47eb84e37a8dafd1ab71020037448d3280916

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        b187322463ef5600cf37159ce5d90823

                        SHA1

                        afa0c2c9b6b00b51e269806a4ff9fbd7752495ce

                        SHA256

                        003b2894b88b2e63fbff53ef615e60d4602ba64e930acd7a5ecf0fc68cd5c55d

                        SHA512

                        6c81dac21a2d144250c5d5ea4e2c5cfbf603a5bf3057772762143144a454e6744762d332d4920f69803c32011f8dcfe599407bd8a156fe526ca9aba286505226

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        06c7e047bd8c3e65452c62c0b4358008

                        SHA1

                        b257bf9bfab7ae999bdbfdfa6bc8e87956cda0dd

                        SHA256

                        0f3ceb77980cc7b3961313013094fc24019a1c588ced27f08a27aa42c9d1432c

                        SHA512

                        19ef46a71ccc0d1b560efa73b58234320e740daed12fe539ea42c40c56b29dc7a381c2f7f435edc24ea257631bd12917ead33d801e690c247a87b57bc243b35e

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        dc7d52e2462708edc68126cf3df37e47

                        SHA1

                        a06eab90692477126a603b6fb8e0379b6121d6b1

                        SHA256

                        6bbe0c169feb1e639258b5195a44c50a2053b2064d6e70703f5130d00c3f9a99

                        SHA512

                        7c05b50c17fe0bdd2f7fdca38bb53b1facad8f9011860f64ea0c4e1c5fa7f39ae1c21f247648e64792de5f9b2398e04581907516d124512471f29a9775c29902

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        e7ab7d252942f7f1d1fc860c4ed520d4

                        SHA1

                        2228427776e72813e4029a0cc119c619274668bc

                        SHA256

                        568d8635b91d759395df9f6c1c0e6dde23c095086d95829182fdc5a9dfeda072

                        SHA512

                        91203443c5f329cee7e0423cced08452904708c07ef5d7bfddc45f7f6c3b507d3009d8824f377253fb24fcbec87832e2c5a368c3a7f7d47f1347005e3e333d77

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        f28d241d8260f6c5c51702bc5425afb0

                        SHA1

                        e58181a7db353964f23ad5a462c050db52afe8b1

                        SHA256

                        8f1ea403b0bfcafda2951106ed7f0fb04cc1239c79f9e611ee69a9ed6efe6dd4

                        SHA512

                        180ccf5b8abba19069e01a7dd15fb8ab2c3de332d916cb2d08b3278488dfa809d7539c85d7a295ba34c1700682211cdc39f6e21e6e79c8a8865f58a321d7e1cf

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        991e6b9765bab09863b0e4aad7f90732

                        SHA1

                        10e7a70811b74f68d8725fb9a9208bd195670a69

                        SHA256

                        12e2cb24313687a6c5747478e8ed6d4a9253df1a9a78b3f20b422009ade78d43

                        SHA512

                        06efdcbf733a7f2f9d6b0f3717f412060a7fb505472bdc15e1f47e5ce6021243bd625804e0a227d28ed094f562f2c19d9559b0489b545bef34ac970e90498463

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        60b34a4c058bd23eccc54ec7c487c490

                        SHA1

                        7e71c3bd5bfa3ea9fb657e269f13ef86958f0b42

                        SHA256

                        d6c1865534c35bec3f73182a311170e2bfcb545c81d33bd0a07218ac955aa088

                        SHA512

                        483ac766cbc15ade6696e38919a3a274b27d0326cfad06f299c491177714cc1579cdab6131979d4efd52da511bfed75b308b029058b71bfc6d930e8fabea5a0e

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        d58d97d722a8622b0991cc8dc2993178

                        SHA1

                        613e71496e249563b7d4d4bea15d7ea87e6ed813

                        SHA256

                        de1b9f21d5e2c6c3e768371d0e0e593f52dcb2d45e1fd7047798d5c84f4288c9

                        SHA512

                        c77a185335642cdce457b36c8d63547f6afd94342262c83a258881baa35038434b37cc9ede57247fb5dc4dd4959dedd3f2f084b74bce8b0a21dbf97d6ee8a758

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        cfda31ac85b04e886d7a5f165f2631a8

                        SHA1

                        dca95d987968ea9904f315e141e661d05da8a063

                        SHA256

                        6f3522332fd23f3a356e0bd4b7c95b300364b6d35d865dd9193cfaf1fefa7202

                        SHA512

                        ae425a8d5ee94489866c0b9e793c3440fc3bcb3b73390ab9a239f12d5c90ed2051b70fc7e8aaff8f8780b5981fc3f6685f3f558daeb60ade967735fc5cc24203

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        318f6c58f6e71232e6df2e278f3df8a8

                        SHA1

                        684eeb2dd320d4a173b039c9f97fdea192d715d5

                        SHA256

                        6a5045a843f7bce868819a715c926a077cc31b9d9507feb5e985cc1af3780aaa

                        SHA512

                        d545a3736e0083cd77605655477be411a928c340af19251577c41177320523d38f0ef09e7cced18d1d954c19288e88ea736bea85f84d508db1769ce047fd6585

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        0ba9568a51e3ebbf89b0dd96413faac5

                        SHA1

                        9a02e369cc81044c035641953b1c24076661334d

                        SHA256

                        3dd084e253f43a53391057d8e20435ee38983379b604d75398c61eac4507e866

                        SHA512

                        44acae6ff3921a745813d8d902113bc64d7892acca958f9489608b4b28bdbededeae5a24cde9d444908dd5bf2c0dbbe2fb622828dc683ae743608ef0532fb50a

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        7b2ee560b9e4c08e04c76586918822b4

                        SHA1

                        fa0f5aa13cec9941f22a765c8ead64cf1c1bf5fe

                        SHA256

                        298bbf2a6a47ba0ee734e50a8a8085007f870aff5cfdfecc5930c5735e2aaba0

                        SHA512

                        55ef9af1a51d1b0cb4c9df3f433d44a717e63e8323dd8ac85b7a00f96f2641e3dfd0d30555b2f7b3981d4fc5dc5ff7dc4cd90a562e62d99b3de5a4ed52bdd5f7

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        099c558ee3f3abc58b434ee568c97a50

                        SHA1

                        5b431ba1167515927924a0a01bedc04e1511e52e

                        SHA256

                        90348113b8aaf31f5139603a2d4200d9da93c7732b5bb49c4706b87f8053b53b

                        SHA512

                        9d143cea421af12205162d111373d0f26549f9c4d09feb1d5e9a7e7adb22ea7d927e9e163ce4cab65805dcd41f9a7acfe5daadba4ada1df3a82e176d74eb3dd3

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        ed88874ac5e88d84e660533bc717baa5

                        SHA1

                        3a822c97edf1c2d3afef6fb5331f80bd1d450dc6

                        SHA256

                        b95d19080c15799639be8b27d958ed59845429d3bd1bd97b3584125ea0f8a1de

                        SHA512

                        4c6032567149416c8260945e7d26361cbf85449e8f68c4e1806687d3af2ded6490d2f66388c34d4e909a6393d5ccbaa0b80860ba139b385af8e3b18d08c00e96

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        0461c20159c2387f0a157150e32c1e35

                        SHA1

                        164c221a058ced7bb1be8837cbb67411635257f1

                        SHA256

                        c93113d09cc58aae6beaa1e6ee00df197b75240413c5d0d384980c7dc964f75b

                        SHA512

                        4960b67a8c4ec9e70d8599f376ad0c5d424602edba45aca492a5bf92bf6722065a989ba0b1a61a865e99e9d5a94c96eb46fbb4ef248604749c2b544aa6b9fea0

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                        Filesize

                        9KB

                        MD5

                        5d79c04605504619cd74975592a47f28

                        SHA1

                        1bb7848c28cfa86634a853d1462156b0e1a86847

                        SHA256

                        74f4f70e96f6459b546fddb59d744213572a52ebe91f46909e608c41a9652296

                        SHA512

                        a7d7b0208fb4c3f6c636a56637974fa33ce7d5344c57cf32e3c74fdb4a91abef92cbcb30b4d6a69f3140401bd7e503e5ead4bc1af7194b0c2b9e872db9430b99

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                        Filesize

                        99KB

                        MD5

                        536e2c0c4bb192411dd4e9b8c5bd6b68

                        SHA1

                        accebb2acad5492ccdd8a0a458713820cc273f9f

                        SHA256

                        e3ab83b4ebfc9b9cb8166e9530b525a02f42656df73335f8103d4dcaa3784422

                        SHA512

                        20660ae3263a235f2ddf8f944eaf371aa9e118ba93ec605b5f07e7a820dab8631d877c34d5e0a3834a472d9e151ca290fa0b92b4a8469da40dc0e24a44499afd

                      • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                        Filesize

                        99KB

                        MD5

                        9e84218d50114a6aa48adf417765866b

                        SHA1

                        e262d5850a26d12b5b53979c59915029e224a0b1

                        SHA256

                        1eabd0d6280a7c98f4dd9b2fb686006a3c118e20df7ac7adccce2fbf9834da97

                        SHA512

                        dbe92c4989e6b45e50a31ce89bf9e53d85d56af7b68666f1bdeb694cf19719d2ac5cd3e672ab2970b30c685213157e58a8f7de19ef30a9dd6522e2257c5bf660