Analysis
- max time kernel
150s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
23/07/2026, 17:04
General
- Target ChipsetUtil.exe
- Size 6.9MB
- Sample260723-vlqfvstblb
- SHA256 cfb7dd76c78aa46f643d2a25b0ce7feae4b17693fcbeccaf615eb7e01d69cae0
Malware Config
Signatures
- VMProtect packed file 2 IoCs
Detects executables packed with VMProtect commercial packer.
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
- Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ChipsetUtil.exe"C:\Users\Admin\AppData\Local\Temp\ChipsetUtil.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2864-0-0x00000001402ED000-0x0000000140711000-memory.dmp
memory/2864-2-0x00007FFEE6660000-0x00007FFEE6662000-memory.dmp
memory/2864-3-0x00007FFEE5730000-0x00007FFEE5732000-memory.dmp
memory/2864-1-0x00007FFEE6650000-0x00007FFEE6652000-memory.dmp
memory/2864-4-0x00007FFEE5740000-0x00007FFEE5742000-memory.dmp
memory/2864-5-0x00007FFEE4010000-0x00007FFEE4012000-memory.dmp
memory/2864-6-0x00007FFEE4020000-0x00007FFEE4022000-memory.dmp
memory/2864-9-0x0000000140000000-0x0000000140DED000-memory.dmp
memory/2864-8-0x00007FFEE6680000-0x00007FFEE6682000-memory.dmp
memory/2864-7-0x00007FFEE6670000-0x00007FFEE6672000-memory.dmp
memory/2864-13-0x00000001402ED000-0x0000000140711000-memory.dmp
memory/2864-14-0x0000000140000000-0x0000000140DED000-memory.dmp