Overview
overview
7Static
static
5Chloride T...10.exe
windows10-ltsc 2021-x64
1Chloride T...PD.exe
windows10-ltsc 2021-x64
5Chloride T...ll.exe
windows10-ltsc 2021-x64
1Chloride T...or.exe
windows10-ltsc 2021-x64
1Chloride T...64.exe
windows10-ltsc 2021-x64
4Chloride T...10.exe
windows10-ltsc 2021-x64
6Chloride T...er.exe
windows10-ltsc 2021-x64
7Chloride T...01.exe
windows10-ltsc 2021-x64
1Analysis
-
max time kernel
105s -
max time network
144s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
02-01-2025 18:26
Behavioral task
behavioral1
Sample
Chloride Tweaks Ultimate 2.0.0/2 Tools/5 OOSU10.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral2
Sample
Chloride Tweaks Ultimate 2.0.0/2 Tools/6 WPD.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral3
Sample
Chloride Tweaks Ultimate 2.0.0/3 Tweaks/3 GPU/Nvidia/1 Driver/!NVCleanstall.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral4
Sample
Chloride Tweaks Ultimate 2.0.0/3 Tweaks/3 GPU/Nvidia/2 Nvidia Settings/!NvidiaProfileInspector.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral5
Sample
Chloride Tweaks Ultimate 2.0.0/3 Tweaks/6 Proccess Lasso/processlassosetup64.exe
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral6
Sample
Chloride Tweaks Ultimate 2.0.0/5 Other/Installers/BraveBrowserSetup-BRV010.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral7
Sample
Chloride Tweaks Ultimate 2.0.0/5 Other/Installers/Firefox Installer.exe
Resource
win10ltsc2021-20241211-en
Behavioral task
behavioral8
Sample
Chloride Tweaks Ultimate 2.0.0/5 Other/Installers/winrar-x64-701.exe
Resource
win10ltsc2021-20241211-en
General
-
Target
Chloride Tweaks Ultimate 2.0.0/3 Tweaks/3 GPU/Nvidia/1 Driver/!NVCleanstall.exe
-
Size
3.5MB
-
MD5
74e418b7676bba62d73711418f9cef71
-
SHA1
02a133a91deec707ca6f8f9e88e0b88d452a4faa
-
SHA256
6d014bb417dc60c89eca14099719241895b003f1010f1b2babd2a1ff731e2c34
-
SHA512
4aada34f52570e7d06e66178c18ad38fbd7f2b7556c656ea71be2a59e51537cc5df11b66d1b7907a59b5bf73e21ba3d1d1ce4d9b490e3bb4c5043f324a9b8d9d
-
SSDEEP
98304:Oy35qCp0qlIdjjGL6P/iikTP35FgcyID23Z53UCMFU+:f3YCi4IdjyOPK5Dpw3+
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeShutdownPrivilege 640 !NVCleanstall.exe Token: SeCreatePagefilePrivilege 640 !NVCleanstall.exe Token: SeDebugPrivilege 640 !NVCleanstall.exe -
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.