General
- Target ChromeSetup (1).exe
- Size 11.8MB
- Sample260720-g22beagx3q
- SHA256 52062fd8cd932ccb67b09248b6b4a5b3f4f964ddf5f3d6aba007e90ebbfe9f10
- MD5 88603b4c4c6d6dd79a3f395d8d29d967
- SHA1 921d1f864324496ab96cf6a592a51c0cb669fc54
- SHA512 e3687743a76c615d3672b22e2a9aba3570b3424c455ed8e4ddd334cee5834503a5fa59577cb1594e7db50d24197cba398e6bf786268265c0f4df4fd73759d91c
- SSDEEP 196608:XBUF+eb6FLXBpbbSnW0uXhq0ww0dqcoFKMOC7mipZ5i+z8vHJiaVb/8dtU1MsotZ:XBUF+eOFLXBpbbSnW0uXhVwNdqcn5C7r
- TLSH T136C69D12B5608074F4A73231B43C67B949327EA29B3585CFB65C7C845FB86E2613A39F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ChromeSetup (1).exe
Resource
win11-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target ChromeSetup (1).exe
- Size 11.8MB
- SHA256 52062fd8cd932ccb67b09248b6b4a5b3f4f964ddf5f3d6aba007e90ebbfe9f10
- MD5 88603b4c4c6d6dd79a3f395d8d29d967
- SHA1 921d1f864324496ab96cf6a592a51c0cb669fc54
- SHA512 e3687743a76c615d3672b22e2a9aba3570b3424c455ed8e4ddd334cee5834503a5fa59577cb1594e7db50d24197cba398e6bf786268265c0f4df4fd73759d91c
- SSDEEP 196608:XBUF+eb6FLXBpbbSnW0uXhq0ww0dqcoFKMOC7mipZ5i+z8vHJiaVb/8dtU1MsotZ:XBUF+eOFLXBpbbSnW0uXhVwNdqcn5C7r
- TLSH T136C69D12B5608074F4A73231B43C67B949327EA29B3585CFB65C7C845FB86E2613A39F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops file in System32 directory
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Component Object Model Hijacking
1