Overview
overview
10Static
static
10chrome.7z
windows7-x64
3chrome.7z
windows10-2004-x64
7Chrome-bin...nifest
windows7-x64
3Chrome-bin...nifest
windows10-2004-x64
3Chrome-bin...s.json
windows7-x64
3Chrome-bin...s.json
windows10-2004-x64
3Chrome-bin...t.json
windows7-x64
3Chrome-bin...t.json
windows10-2004-x64
3Chrome-bin...ata.pb
windows7-x64
3Chrome-bin...ata.pb
windows10-2004-x64
3Chrome-bin...ICENSE
windows7-x64
1Chrome-bin...ICENSE
windows10-2004-x64
1Chrome-bin...dm.dll
windows7-x64
1Chrome-bin...dm.dll
windows10-2004-x64
1Chrome-bin...ll.sig
windows7-x64
3Chrome-bin...ll.sig
windows10-2004-x64
3Chrome-bin...t.json
windows7-x64
3Chrome-bin...t.json
windows10-2004-x64
3Chrome-bin...me.dll
windows10-2004-x64
1Chrome-bin...ll.sig
windows7-x64
3Chrome-bin...ll.sig
windows10-2004-x64
3Chrome-bin...xe.sig
windows7-x64
3Chrome-bin...xe.sig
windows10-2004-x64
3Chrome-bin...lf.dll
windows10-2004-x64
1Chrome-bin...er.exe
windows10-2004-x64
1Chrome-bin...er.dll
windows10-2004-x64
1Chrome-bin...47.dll
windows10-2004-x64
1Chrome-bin...s.json
windows7-x64
3Chrome-bin...s.json
windows10-2004-x64
3Chrome-bin...er.dll
windows10-2004-x64
1Chrome-bin...il.dll
windows10-2004-x64
1Chrome-bin...ce.exe
windows10-2004-x64
1Analysis
-
max time kernel
143s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09-04-2024 19:59
Behavioral task
behavioral1
Sample
chrome.7z
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
chrome.7z
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Chrome-bin/123.0.6312.58/123.0.6312.58.manifest
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Chrome-bin/123.0.6312.58/123.0.6312.58.manifest
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Chrome-bin/123.0.6312.58/Extensions/external_extensions.json
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
Chrome-bin/123.0.6312.58/Extensions/external_extensions.json
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
Chrome-bin/123.0.6312.58/MEIPreload/manifest.json
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Chrome-bin/123.0.6312.58/MEIPreload/manifest.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Chrome-bin/123.0.6312.58/MEIPreload/preloaded_data.pb
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
Chrome-bin/123.0.6312.58/MEIPreload/preloaded_data.pb
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Chrome-bin/123.0.6312.58/WidevineCdm/LICENSE
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Chrome-bin/123.0.6312.58/WidevineCdm/LICENSE
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Chrome-bin/123.0.6312.58/WidevineCdm/_platform_specific/win_x64/widevinecdm.dll
Resource
win7-20240319-en
Behavioral task
behavioral14
Sample
Chrome-bin/123.0.6312.58/WidevineCdm/_platform_specific/win_x64/widevinecdm.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Chrome-bin/123.0.6312.58/WidevineCdm/_platform_specific/win_x64/widevinecdm.dll.sig
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
Chrome-bin/123.0.6312.58/WidevineCdm/_platform_specific/win_x64/widevinecdm.dll.sig
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Chrome-bin/123.0.6312.58/WidevineCdm/manifest.json
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
Chrome-bin/123.0.6312.58/WidevineCdm/manifest.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Chrome-bin/123.0.6312.58/chrome.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral20
Sample
Chrome-bin/123.0.6312.58/chrome.dll.sig
Resource
win7-20240221-en
Behavioral task
behavioral21
Sample
Chrome-bin/123.0.6312.58/chrome.dll.sig
Resource
win10v2004-20240226-en
Behavioral task
behavioral22
Sample
Chrome-bin/123.0.6312.58/chrome.exe.sig
Resource
win7-20240221-en
Behavioral task
behavioral23
Sample
Chrome-bin/123.0.6312.58/chrome.exe.sig
Resource
win10v2004-20240226-en
Behavioral task
behavioral24
Sample
Chrome-bin/123.0.6312.58/chrome_elf.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
Chrome-bin/123.0.6312.58/chrome_pwa_launcher.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral26
Sample
Chrome-bin/123.0.6312.58/chrome_wer.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
Chrome-bin/123.0.6312.58/d3dcompiler_47.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral28
Sample
Chrome-bin/123.0.6312.58/default_apps/external_extensions.json
Resource
win7-20240221-en
Behavioral task
behavioral29
Sample
Chrome-bin/123.0.6312.58/default_apps/external_extensions.json
Resource
win10v2004-20240319-en
Behavioral task
behavioral30
Sample
Chrome-bin/123.0.6312.58/dxcompiler.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
Chrome-bin/123.0.6312.58/dxil.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral32
Sample
Chrome-bin/123.0.6312.58/elevation_service.exe
Resource
win10v2004-20240226-en
General
-
Target
Chrome-bin/123.0.6312.58/chrome.dll.sig
-
Size
1KB
-
MD5
a66e10c82219bbc1fbfbf524f691cdd8
-
SHA1
41864859501b736c4797840ec23f236309ad2349
-
SHA256
304e37e3bfde9b4290270ec263a1d156cd0faeec7576145b85cbeebe3d5df2bb
-
SHA512
656ec1fed56ce2f391310536b90a1088ec2f8fa6ad165e40e969d7dc9767f87de3ff5ef42e62da55f87167d71f622fa920206f9d8b0dea557f07e870c90cd78a
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-275798769-4264537674-1142822080-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-275798769-4264537674-1142822080-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 524 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Chrome-bin\123.0.6312.58\chrome.dll.sig1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx