General
- Target ChromeSetup.exe
- Size 11.8MB
- Sample260907-mbvc3avald
- SHA256 5acaf796fdb54202a53a223239f7ab1da48a41e3ebb6fee2a42f5a3908f5a56d
- MD5 8fe76ea8c78c2f5c2b2bbb5facd31bf8
- SHA1 71897702b20e59fbc7dfbedc6c56a5044db0e196
- SHA512 3c1ea36ebac83ddc8910e5d63ec2cc7c576967b6f0f1ee109d573d091280e713a9249f226e4b2b098ea3fe8306e493eafc2ff9ac8725fc38eac53e673616a8a5
- SSDEEP 196608:XBUF+eb6FLXBpbbSnW0uXhq0ww0dqcoFKMOC7mipZ5i+z8vHJiaVb/8dtU1MsotE:XBUF+eOFLXBpbbSnW0uXhVwNdqcn5C7W
- TLSH T151C69D12B5608074F4A73231B43C67B949327EA29B3585CFB65C7C845FB86E2613A39F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ChromeSetup.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ChromeSetup.exe
- Size 11.8MB
- SHA256 5acaf796fdb54202a53a223239f7ab1da48a41e3ebb6fee2a42f5a3908f5a56d
- MD5 8fe76ea8c78c2f5c2b2bbb5facd31bf8
- SHA1 71897702b20e59fbc7dfbedc6c56a5044db0e196
- SHA512 3c1ea36ebac83ddc8910e5d63ec2cc7c576967b6f0f1ee109d573d091280e713a9249f226e4b2b098ea3fe8306e493eafc2ff9ac8725fc38eac53e673616a8a5
- SSDEEP 196608:XBUF+eb6FLXBpbbSnW0uXhq0ww0dqcoFKMOC7mipZ5i+z8vHJiaVb/8dtU1MsotE:XBUF+eOFLXBpbbSnW0uXhVwNdqcn5C7W
- TLSH T151C69D12B5608074F4A73231B43C67B949327EA29B3585CFB65C7C845FB86E2613A39F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops file in System32 directory
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Component Object Model Hijacking
1