Analysis
- max time kernel
151s - max time network
113s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
30/09/2026, 12:07
General
- Target Chrome.exe
- Size 24.4MB
- Sample260930-para5ats8n
- SHA256 1d1a37281626ad94aad571a4828b0b0994bfc4b7da2d14f121e0ef565c3afb62
Malware Config
Signatures
- Executes dropped EXE 6 IoCs
- Adds Run key to start application 2 TTPs 2 IoCs
- Modifies system certificate store 2 TTPs 2 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Chrome.exe"C:\Users\Admin\AppData\Local\Temp\Chrome.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Update\x4dofg2r\googleupdater.exe"C:\ProgramData\Google\Update\x4dofg2r\googleupdater.exe" /install22⤵
- Executes dropped EXE
- Adds Run key to start application
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Update\x4dofg2r\crashpad_handler.exe"C:\ProgramData\Google\Update\x4dofg2r\crashpad_handler.exe"3⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Update\x4dofg2r\chrome.exe"C:\ProgramData\Google\Update\x4dofg2r\chrome.exe" --algorithm pearlhash --pool prl.kryptex.network:7048 --wallet prl1ppukudqjtm2fvdnlrw9653xeuafkf3953vd3dtygz948k4fk7vkgqax6gjr.BCSNFRHEA4⤵
- Executes dropped EXE
-
-
-
C:\ProgramData\Google\Update\x4dofg2r\chrome.exe"C:\ProgramData\Google\Update\x4dofg2r\chrome.exe" --algorithm pearlhash --pool prl.kryptex.network:7048 --wallet prl1ppukudqjtm2fvdnlrw9653xeuafkf3953vd3dtygz948k4fk7vkgqax6gjr.BCSNFRHEA3⤵
- Executes dropped EXE
-
-
-
C:\ProgramData\Google\Update\x4dofg2r\googleupdater.exe"C:\ProgramData\Google\Update\x4dofg2r\googleupdater.exe" /run1⤵
- Executes dropped EXE
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Update\x4dofg2r\chrome.exe"C:\ProgramData\Google\Update\x4dofg2r\chrome.exe" --algorithm pearlhash --pool prl.kryptex.network:7048 --wallet prl1ppukudqjtm2fvdnlrw9653xeuafkf3953vd3dtygz948k4fk7vkgqax6gjr.BCSNFRHEA2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
chrome.dll
chrome.exe
crashpad_handler.exe
googleupdater.exe
nvidia-smi.exe
memory/460-39-0x00007FF67D410000-0x00007FF67D655000-memory.dmp
memory/460-56-0x00007FF67D410000-0x00007FF67D655000-memory.dmp
memory/460-54-0x0000000140000000-0x0000000140EA9000-memory.dmp
memory/2148-59-0x00007FF6577E0000-0x00007FF65780D000-memory.dmp
memory/2664-32-0x00007FF745B10000-0x00007FF745B3D000-memory.dmp
memory/2980-16-0x0000000140000000-0x0000000140EA9000-memory.dmp
memory/2980-8-0x00007FF67D410000-0x00007FF67D655000-memory.dmp
memory/4232-80-0x00007FF6577E0000-0x00007FF65780D000-memory.dmp
memory/6020-5-0x0000000140000000-0x0000000140EA9000-memory.dmp
memory/6020-4-0x00007FF661090000-0x00007FF6612D5000-memory.dmp
memory/6020-2-0x0000000140000000-0x0000000140EA9000-memory.dmp
memory/6020-0-0x0000000140000000-0x0000000140EA9000-memory.dmp
memory/6020-76-0x00007FF661090000-0x00007FF6612D5000-memory.dmp
memory/6116-49-0x00007FF70BD40000-0x00007FF70BD69000-memory.dmp
memory/6116-62-0x00007FF70BD40000-0x00007FF70BD69000-memory.dmp
memory/6116-65-0x00007FF70BD40000-0x00007FF70BD69000-memory.dmp
memory/6116-68-0x00007FF70BD40000-0x00007FF70BD69000-memory.dmp
memory/6116-71-0x00007FF70BD40000-0x00007FF70BD69000-memory.dmp
memory/6116-74-0x00007FF70BD40000-0x00007FF70BD69000-memory.dmp
memory/6116-57-0x00007FF70BD40000-0x00007FF70BD69000-memory.dmp
memory/6116-38-0x00007FF70BD40000-0x00007FF70BD69000-memory.dmp
memory/6116-81-0x00007FF70BD40000-0x00007FF70BD69000-memory.dmp
memory/6116-83-0x00007FF70BD40000-0x00007FF70BD69000-memory.dmp