Resubmissions

20/07/2026, 12:01

260720-n68plshs9n7

20/07/2026, 11:57

260720-n4n77ahs2k8

20/07/2026, 11:23

260720-nhb1qsgs5r7

General

  • Target
    Chrome.7z
  • Size 144.0MB
  • Sample260720-n4n77ahs2k
  • SHA256 cd6d3d693d5bbb6237415f005c9cabd29289b20a500f07c66afc0f9003bf80f1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Files/Google Chrome Manager.exe
    • Size 1.2MB
    • SHA256 878004b31b64bb8b66e4cc8029f6dcf5904c0f2e0f2bd644c9ed707e6a80bf8e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Files/googlechromestandaloneenterprise64.msi
    • Size 150.1MB
    • SHA256 c280470305d8f75c0c060c08b6ddcd2d7c3c1b6d2119afefa6f1bd3e658e5cb3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • Executes dropped EXE

    • Loads dropped DLL

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    • Target
      Invoke-AppDeployToolkit.exe
    • Size 211KB
    • SHA256 8c32e7970a953d2f28e15d29076ef0578ccc18770ff23b752361b9271ad3cdab
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      Invoke-AppDeployToolkit.ps1
    • Size 5KB
    • SHA256 9254890a6ad224931c220df0ef6e1e0a6761ba8e3acce8845937ce37e6e54ae0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PSAppDeployToolkit.Extensions/PSAppDeployToolkit.Extensions.psm1
    • Size 2KB
    • SHA256 56e168a99b5f83874de42b98f631ecf96a062830ce2b65368c507f4f2f11a2d3
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      PSAppDeployToolkit/Frontend/v3/AppDeployToolkit/AppDeployToolkitExtensions.ps1
    • Size 17KB
    • SHA256 e6dc67bcfc2e3b422a85ed50490ea122b3cc3c29d6fe8108fdd5097fd644fd8f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PSAppDeployToolkit/Frontend/v3/AppDeployToolkit/AppDeployToolkitMain.ps1
    • Size 201KB
    • SHA256 9ecd432bfa1b53d0fd8c3527d0855a0c18a164668a7a8ed83a83c51243ad8824
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PSAppDeployToolkit/Frontend/v3/Deploy-Application.exe
    • Size 211KB
    • SHA256 b876abd380a10b1be1fab42ea2c6458ba3eda2ada91447c3d8afeba4945b0405
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/Frontend/v4/Invoke-AppDeployToolkit.exe
    • Size 211KB
    • SHA256 8c32e7970a953d2f28e15d29076ef0578ccc18770ff23b752361b9271ad3cdab
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PSAppDeployToolkit/Frontend/v4/Invoke-AppDeployToolkit.ps1
    • Size 29KB
    • SHA256 792931ff8d784ac3b27efcdc7575d0f0ce65fc48a3bcf8f02fa55d8cc551163c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PSAppDeployToolkit/Frontend/v4/PSAppDeployToolkit.Extensions/PSAppDeployToolkit.Extensions.psm1
    • Size 19KB
    • SHA256 6e95ccd03bb141c25f84cbbbd2854ee49f07fe6b60c20e56e6d8737562634dcd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PSAppDeployToolkit/PSAppDeployToolkit.psm1
    • Size 1.2MB
    • SHA256 b6cfbcd88c0ff8b03e0940cd695d6055f2eb1980ee8f09fdfb1192234547c35f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      PSAppDeployToolkit/lib/Newtonsoft.Json.dll
    • Size 704KB
    • SHA256 f0c07af0e84d4dd4da4bd7823ba4535bc0481b3bf623ed40b659b68147a6bb75
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/PSADT.ClientServer.Client.Launcher.exe
    • Size 202KB
    • SHA256 3dac4edfdc531959c3d69e6ddce11cbb114eb6410f97474388e001a7a9fa9385
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/PSADT.ClientServer.Client.exe
    • Size 228KB
    • SHA256 b8b8826fb203af7e655b73dea7badb8f6558ce8b91318b7243dedae347fd0aec
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/PSADT.ClientServer.Server.dll
    • Size 41KB
    • SHA256 70025a26589890a2ea04bfc18e933e6404afd2be8a0d2dbd281a64e31794811b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/PSADT.UserInterface.dll
    • Size 175KB
    • SHA256 c5746964da5bcc046fcb54a5c66246484b21d26b1b91106dc5747d8270fb1ae4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/PSADT.dll
    • Size 671KB
    • SHA256 413f4ea3c82b5c0184eece7a9f36b88aede9989142863df758a56beecdecc4c1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/System.Buffers.dll
    • Size 23KB
    • SHA256 2d78d770c9cb997199154ae8c018b9f1d1efbc86729f7264dde6dbad2a12cac3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/System.IO.FileSystem.AccessControl.dll
    • Size 27KB
    • SHA256 e6026501ad4056ff2f1655b0afdfe8923bc6e8fbad67e1e9ef56e3002f49fbb9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/System.Memory.dll
    • Size 141KB
    • SHA256 d5e8e4866f9cfa66f7765660f84b210198893e55335487afe5ebda342c0e913d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/System.Numerics.Vectors.dll
    • Size 107KB
    • SHA256 20c2fa81b8c70d651099d762954f285fd4f942e63b2d7217c145dab8d4b2f4c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/System.Runtime.CompilerServices.Unsafe.dll
    • Size 18KB
    • SHA256 08cbd7278b66f1e68425a82d4b97181a4130d93e3dd91831407aba7212ccdacf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/System.Security.AccessControl.dll
    • Size 32KB
    • SHA256 1fda491eebdb19ea0a83cf6c16ab5dd004a1bfdfc845ede017ebe0945beb927f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/System.Security.Principal.Windows.dll
    • Size 17KB
    • SHA256 b4d8e15adc235d0e858e39b5133e5d00a4baa8c94f4f39e3b5e791b0f9c0c806
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/af-ZA/iNKORE.UI.WPF.Modern.Controls.resources.dll
    • Size 23KB
    • SHA256 7d166df226749103147fc6f75ed6e1f3c38d14977cfe5636e4f43369e29e55a1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/am-ET/iNKORE.UI.WPF.Modern.Controls.resources.dll
    • Size 23KB
    • SHA256 b8fbf297f21b2a9a932206fbd289a8f5f8ee5ca13b05eadcd78786fe92d7b821
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/ar-SA/iNKORE.UI.WPF.Modern.Controls.resources.dll
    • Size 23KB
    • SHA256 ec3dc751fa8a0dc02f336af263a5e4191a1910dbb1f2fc501a6f12f6f2ce4d7c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/as-IN/iNKORE.UI.WPF.Modern.Controls.resources.dll
    • Size 19KB
    • SHA256 0bb6e869ee28e8ee42aff798e17e282d9bff8b8f29a652144a7416fdab57b0a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/az-Latn-AZ/iNKORE.UI.WPF.Modern.Controls.resources.dll
    • Size 23KB
    • SHA256 a5bab0ed084a93c49e9041033e7706fa9483fa950eaee93f185d932d72fdb21b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/be-BY/iNKORE.UI.WPF.Modern.Controls.resources.dll
    • Size 20KB
    • SHA256 d2f13d2ee24dc41c118bf77a2beaa65e268a67fe6bcd2ded1cd81d7bf655acf1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      PSAppDeployToolkit/lib/bg-BG/iNKORE.UI.WPF.Modern.Controls.resources.dll
    • Size 24KB
    • SHA256 136b8ec66164811cf980bea22895b0801ee67fc9327c584036f7badded9cc9ee
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
5/10

behavioral1

Score
1/10

behavioral2

defense_evasiondiscoverypersistenceprivilege_escalationransomwaretrojan
Score
8/10

behavioral3

execution
Score
3/10

behavioral4

execution
Score
3/10

behavioral5

execution
Score
3/10

behavioral6

execution
Score
3/10

behavioral7

execution
Score
3/10

behavioral8

Score
1/10

behavioral9

execution
Score
3/10

behavioral10

execution
Score
3/10

behavioral11

execution
Score
3/10

behavioral12

execution
Score
3/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10