780044208370ddc653095749d6e17ba029364d169891c8fcf2ff10974e0800ab | Triage

Submit
Reports

Overview

overview

Static

static

3

chrome.exe

windows11-21h2-x64

Resubmissions

02/04/2025, 19:18

250402-x1fajsvmt9 10

22/03/2025, 04:45

250322-fdd1jaxzax 10

22/03/2025, 04:32

250322-e5x22sxydw 10

22/03/2025, 01:50

250322-b9qa8ayrs5 10

Sharing

General

Target

chrome.exe
Size

4.1MB
Sample

250322-b9qa8ayrs5
MD5

d162022a4f77fe568e3644c8ddccfc91
SHA1

940b43d35e0bd31d108b5758339494e1b990ac21
SHA256

780044208370ddc653095749d6e17ba029364d169891c8fcf2ff10974e0800ab
SHA512

81db20a0cf1ba119769a86b1c24a1106a2a13c0dd4c42285128cd506c385e596466f5bafae196ec22187fbd729eb5167295b6d9850d04d92c1c67540bba8573e
SSDEEP

98304:bhmbefkYYSmghDECMUVXhxEt3/PGrcFEXdA+Sif2g07:bf8YbmGlhVmv+r1XyNi+g07

Score

10^/10

defense_evasion discovery evasion execution exploit persistence privilege_escalation trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

chrome.exe

Resource

win11-20250314-en

defense_evasion discovery evasion execution exploit persistence privilege_escalation trojan

windows11-21h2-x64

34 signatures

900 seconds

Malware Config

Targets

- Target
  
  chrome.exe
- Size
  
  4.1MB
- MD5
  
  d162022a4f77fe568e3644c8ddccfc91
- SHA1
  
  940b43d35e0bd31d108b5758339494e1b990ac21
- SHA256
  
  780044208370ddc653095749d6e17ba029364d169891c8fcf2ff10974e0800ab
- SHA512
  
  81db20a0cf1ba119769a86b1c24a1106a2a13c0dd4c42285128cd506c385e596466f5bafae196ec22187fbd729eb5167295b6d9850d04d92c1c67540bba8573e
- SSDEEP
  
  98304:bhmbefkYYSmghDECMUVXhxEt3/PGrcFEXdA+Sif2g07:bf8YbmGlhVmv+r1XyNi+g07
Score

10^/10

defense_evasion discovery evasion execution exploit persistence privilege_escalation trojan
- Disables service(s)
  defense_evasion execution
- Modifies Windows Defender DisableAntiSpyware settings
  evasion trojan
- Modifies Windows Defender Real-time Protection settings
  defense_evasion trojan
- Modifies Windows Defender TamperProtection settings
  evasion trojan
- Modifies Windows Defender notification settings
  defense_evasion trojan
- Modifies security service
  defense_evasion
- UAC bypass
  defense_evasion trojan
- Disables Task Manager via registry modification
  defense_evasion
- Possible privilege escalation attempt
  exploit
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
- File and Directory Permissions Modification: Windows File and Directory Permissions Modification
  defense_evasion
- Modifies Security services
  Modifies the startup behavior of a security service.
  defense_evasion
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Accessibility Features

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Accessibility Features

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

File and Directory Permissions Modification

Windows File and Directory Permissions Modification

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

defense_evasiondiscoveryevasionexecutionexploitpersistenceprivilege_escalationtrojan

© 2018-2025

Terms | Privacy