Analysis
- max time kernel
149s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
28/09/2026, 12:26
General
- Target Chrome.exe
- Size 14.6MB
- Sample260928-pma5nstdma
- SHA256 fd489eaf44af60a8bd0c45f0a35f8cc0dfc5ceb1636f12c13d9cf9d7f65360e3
Malware Config
Signatures
- Executes dropped EXE 6 IoCs
- Adds Run key to start application 2 TTPs 2 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Chrome.exe"C:\Users\Admin\AppData\Local\Temp\Chrome.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Update\2htsm2zn\googleupdater.exe"C:\ProgramData\Google\Update\2htsm2zn\googleupdater.exe" /install22⤵
- Executes dropped EXE
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Update\2htsm2zn\crashpad_handler.exe"C:\ProgramData\Google\Update\2htsm2zn\crashpad_handler.exe"3⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Update\2htsm2zn\chrome.exe"C:\ProgramData\Google\Update\2htsm2zn\chrome.exe" --algorithm pearlhash --pool prl.kryptex.network:7048 --wallet prl1ppumvvwwskhqms04q3h3jlqd7rprr2qu8qklls623hn3mkmlrc38sagsswl.CZIEFEEQ4⤵
- Executes dropped EXE
-
-
-
C:\ProgramData\Google\Update\2htsm2zn\chrome.exe"C:\ProgramData\Google\Update\2htsm2zn\chrome.exe" --algorithm pearlhash --pool prl.kryptex.network:7048 --wallet prl1ppumvvwwskhqms04q3h3jlqd7rprr2qu8qklls623hn3mkmlrc38sagsswl.CZIEFEEQ3⤵
- Executes dropped EXE
-
-
-
C:\ProgramData\Google\Update\2htsm2zn\googleupdater.exe"C:\ProgramData\Google\Update\2htsm2zn\googleupdater.exe" /run1⤵
- Executes dropped EXE
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Update\2htsm2zn\chrome.exe"C:\ProgramData\Google\Update\2htsm2zn\chrome.exe" --algorithm pearlhash --pool prl.kryptex.network:7048 --wallet prl1ppumvvwwskhqms04q3h3jlqd7rprr2qu8qklls623hn3mkmlrc38sagsswl.CZIEFEEQ2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
chrome.dll
chrome.exe
crashpad_handler.exe
googleupdater.exe
nvidia-smi.exe
memory/888-7-0x00007FF7DE870000-0x00007FF7DE884000-memory.dmp
memory/888-16-0x0000000140000000-0x0000000140E6D000-memory.dmp
memory/1252-73-0x00007FF74A670000-0x00007FF74A695000-memory.dmp
memory/1484-44-0x0000000140000000-0x0000000140E6D000-memory.dmp
memory/1484-50-0x0000000140000000-0x0000000140E6D000-memory.dmp
memory/1484-49-0x00007FF7DE870000-0x00007FF7DE884000-memory.dmp
memory/1484-43-0x00007FF7DE870000-0x00007FF7DE884000-memory.dmp
memory/3408-54-0x00007FF731FD0000-0x00007FF731FF1000-memory.dmp
memory/3408-35-0x00007FF731FD0000-0x00007FF731FF1000-memory.dmp
memory/3408-83-0x00007FF731FD0000-0x00007FF731FF1000-memory.dmp
memory/3408-87-0x00007FF731FD0000-0x00007FF731FF1000-memory.dmp
memory/3408-75-0x00007FF731FD0000-0x00007FF731FF1000-memory.dmp
memory/3408-85-0x00007FF731FD0000-0x00007FF731FF1000-memory.dmp
memory/3408-57-0x00007FF731FD0000-0x00007FF731FF1000-memory.dmp
memory/3408-60-0x00007FF731FD0000-0x00007FF731FF1000-memory.dmp
memory/3408-63-0x00007FF731FD0000-0x00007FF731FF1000-memory.dmp
memory/3408-66-0x00007FF731FD0000-0x00007FF731FF1000-memory.dmp
memory/3408-69-0x00007FF731FD0000-0x00007FF731FF1000-memory.dmp
memory/3408-78-0x00007FF731FD0000-0x00007FF731FF1000-memory.dmp
memory/3952-52-0x00007FF74A670000-0x00007FF74A695000-memory.dmp
memory/5560-0-0x0000000140000000-0x0000000140E6D000-memory.dmp
memory/5560-2-0x0000000140000000-0x0000000140E6D000-memory.dmp
memory/5560-81-0x00007FF6C1340000-0x00007FF6C1354000-memory.dmp
memory/5560-8-0x0000000140000000-0x0000000140E6D000-memory.dmp
memory/5560-6-0x00007FF6C1340000-0x00007FF6C1354000-memory.dmp
memory/5624-29-0x00007FF613C90000-0x00007FF613CB5000-memory.dmp