General
- Target ChromeSetup.exe
- Size 11.2MB
- Sample260527-knm4eahv2p
- SHA256 a09070449939f8fcb97327dfb9deb98180db787920f3980ca9b90bc109fffb0f
- MD5 e38e77a47bc312ec8d3b9e32e56d9e2b
- SHA1 515df9ee9ef53b6a5596f5868454b1ce36778d6d
- SHA512 6e89dd0999a82e566c12ce12c75155e8f2e8b4c536959632522e62a48dd95a9af51a5f89dc74d17510ecfbd762330f5f7db7b5150288cecb3771e1601a6c27b6
- SSDEEP 196608:wR2dqCK8GiLKsq+YpWhTlilBVg3+yIg3KuyFdDEbBLFpl3VACH69XKVHwliByrcG:wR2QCPLKsq+YpWhTlilBS+y161FdDEbk
- TLSH T1DBC69D13B5A0A174E4A73231F43D67394D323E62AB3585CF86906CC86FB86D2653A35F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ChromeSetup.exe
Resource
win10v2004-20260513-en
25 signatures
900 seconds
Malware Config
Targets
-
- Target ChromeSetup.exe
- Size 11.2MB
- SHA256 a09070449939f8fcb97327dfb9deb98180db787920f3980ca9b90bc109fffb0f
- MD5 e38e77a47bc312ec8d3b9e32e56d9e2b
- SHA1 515df9ee9ef53b6a5596f5868454b1ce36778d6d
- SHA512 6e89dd0999a82e566c12ce12c75155e8f2e8b4c536959632522e62a48dd95a9af51a5f89dc74d17510ecfbd762330f5f7db7b5150288cecb3771e1601a6c27b6
- SSDEEP 196608:wR2dqCK8GiLKsq+YpWhTlilBVg3+yIg3KuyFdDEbBLFpl3VACH69XKVHwliByrcG:wR2QCPLKsq+YpWhTlilBS+y161FdDEbk
- TLSH T1DBC69D13B5A0A174E4A73231F43D67394D323E62AB3585CF86906CC86FB86D2653A35F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Downloads MZ/PE file
-
Drops file in System32 directory
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Component Object Model Hijacking
1