Analysis
- max time kernel
151s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
30/09/2026, 12:08
General
- Target Chrome.exe
- Size 22.5MB
- Sample260930-pavzbaef89
- SHA256 e9868f93500bdfb2f0fb8ccbbe942b64c1a82ca9ab268327f46dd382be5612b1
Malware Config
Signatures
- Executes dropped EXE 6 IoCs
- Adds Run key to start application 2 TTPs 2 IoCs
- Modifies system certificate store 2 TTPs 2 IoCs
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Chrome.exe"C:\Users\Admin\AppData\Local\Temp\Chrome.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Update\3jse6gsd\googleupdater.exe"C:\ProgramData\Google\Update\3jse6gsd\googleupdater.exe" /install22⤵
- Executes dropped EXE
- Adds Run key to start application
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Update\3jse6gsd\crashpad_handler.exe"C:\ProgramData\Google\Update\3jse6gsd\crashpad_handler.exe"3⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Update\3jse6gsd\chrome.exe"C:\ProgramData\Google\Update\3jse6gsd\chrome.exe" --algorithm pearlhash --pool prl.kryptex.network:7048 --wallet prl1ppumvvwwskhqms04q3h3jlqd7rprr2qu8qklls623hn3mkmlrc38sagsswl.ESZAPMTOP4⤵
- Executes dropped EXE
-
-
-
C:\ProgramData\Google\Update\3jse6gsd\chrome.exe"C:\ProgramData\Google\Update\3jse6gsd\chrome.exe" --algorithm pearlhash --pool prl.kryptex.network:7048 --wallet prl1ppumvvwwskhqms04q3h3jlqd7rprr2qu8qklls623hn3mkmlrc38sagsswl.ESZAPMTOP3⤵
- Executes dropped EXE
-
-
-
C:\ProgramData\Google\Update\3jse6gsd\googleupdater.exe"C:\ProgramData\Google\Update\3jse6gsd\googleupdater.exe" /run1⤵
- Executes dropped EXE
- Adds Run key to start application
- Suspicious use of WriteProcessMemory
-
C:\ProgramData\Google\Update\3jse6gsd\chrome.exe"C:\ProgramData\Google\Update\3jse6gsd\chrome.exe" --algorithm pearlhash --pool prl.kryptex.network:7048 --wallet prl1ppumvvwwskhqms04q3h3jlqd7rprr2qu8qklls623hn3mkmlrc38sagsswl.ESZAPMTOP2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
chrome.dll
chrome.exe
crashpad_handler.exe
googleupdater.exe
nvidia-smi.exe
memory/1672-60-0x00007FF672880000-0x00007FF6728AC000-memory.dmp
memory/2388-9-0x00007FF730950000-0x00007FF730A8F000-memory.dmp
memory/2388-16-0x0000000140000000-0x0000000140EB0000-memory.dmp
memory/3012-49-0x00007FF6E9C60000-0x00007FF6E9C89000-memory.dmp
memory/3012-63-0x00007FF6E9C60000-0x00007FF6E9C89000-memory.dmp
memory/3012-38-0x00007FF6E9C60000-0x00007FF6E9C89000-memory.dmp
memory/3012-75-0x00007FF6E9C60000-0x00007FF6E9C89000-memory.dmp
memory/3012-80-0x00007FF6E9C60000-0x00007FF6E9C89000-memory.dmp
memory/3012-72-0x00007FF6E9C60000-0x00007FF6E9C89000-memory.dmp
memory/3012-53-0x00007FF6E9C60000-0x00007FF6E9C89000-memory.dmp
memory/3012-85-0x00007FF6E9C60000-0x00007FF6E9C89000-memory.dmp
memory/3012-69-0x00007FF6E9C60000-0x00007FF6E9C89000-memory.dmp
memory/3012-66-0x00007FF6E9C60000-0x00007FF6E9C89000-memory.dmp
memory/3180-32-0x00007FF6C3D50000-0x00007FF6C3D7C000-memory.dmp
memory/3492-7-0x0000000140000000-0x0000000140EB0000-memory.dmp
memory/3492-2-0x0000000140000000-0x0000000140EB0000-memory.dmp
memory/3492-0-0x0000000140000000-0x0000000140EB0000-memory.dmp
memory/3492-3-0x00007FF6F2CD0000-0x00007FF6F2E0F000-memory.dmp
memory/3492-78-0x00007FF6F2CD0000-0x00007FF6F2E0F000-memory.dmp
memory/4268-83-0x00007FF672880000-0x00007FF6728AC000-memory.dmp
memory/6104-46-0x00007FF730950000-0x00007FF730A8F000-memory.dmp
memory/6104-56-0x0000000140000000-0x0000000140EB0000-memory.dmp
memory/6104-58-0x00007FF730950000-0x00007FF730A8F000-memory.dmp