Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    03/10/2026, 09:20

General

  • Target
    Injector (3).exe
  • Size 70KB
  • Sample261003-lasbmswzhy
  • SHA256 7500d627aafa8cfc35b182a6f42afb2c4a3a0cfefee80211ae6498cec7411fd1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 17 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Injector (3).exe
    "C:\Users\Admin\AppData\Local\Temp\Injector (3).exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4772
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe"
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1804
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffb84f1c728,0x7ffb84f1c734,0x7ffb84f1c740
      2⤵
        PID:4444
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,5228742178324245885,3833226590530638618,262144 --field-trial-handle=2068,i,14017189472882570406,7165634091577392026,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2064 /prefetch:2
        2⤵
          PID:2304
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,1171905164199114058,657008615371416583,524288 --field-trial-handle=2068,i,14017189472882570406,7165634091577392026,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2340 /prefetch:3
          2⤵
          • System Time Discovery
          PID:908
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2440,i,16323924360496589365,8504357187466708146,524288 --field-trial-handle=2068,i,14017189472882570406,7165634091577392026,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2452 /prefetch:8
          2⤵
            PID:4140
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,7069484723213247002,2107799241962678468,2097152 --field-trial-handle=2068,i,14017189472882570406,7165634091577392026,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3204 /prefetch:1
            2⤵
              PID:4572
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3264,i,12655579772230972179,7759099971176531113,2097152 --field-trial-handle=2068,i,14017189472882570406,7165634091577392026,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3300 /prefetch:1
              2⤵
                PID:3392
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4544,i,63819450969014643,1816654821293266730,2097152 --field-trial-handle=2068,i,14017189472882570406,7165634091577392026,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4572 /prefetch:1
                2⤵
                  PID:944
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5348,i,15432844360761108150,18155304226126387859,524288 --field-trial-handle=2068,i,14017189472882570406,7165634091577392026,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5232 /prefetch:8
                  2⤵
                    PID:1568
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5392,i,7173515122966606460,11159771856080190096,524288 --field-trial-handle=2068,i,14017189472882570406,7165634091577392026,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5636 /prefetch:8
                    2⤵
                      PID:4180
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5440,i,673960444833042828,4555241166548138565,524288 --field-trial-handle=2068,i,14017189472882570406,7165634091577392026,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5360 /prefetch:8
                      2⤵
                        PID:952
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5396,i,5927333478679526224,1635777926953615017,524288 --field-trial-handle=2068,i,14017189472882570406,7165634091577392026,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5232 /prefetch:8
                        2⤵
                          PID:4404
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5444,i,3673292555145516427,4929714836291057481,262144 --field-trial-handle=2068,i,14017189472882570406,7165634091577392026,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5536 /prefetch:8
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:1672
                      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                        1⤵
                          PID:1632
                        • C:\Windows\system32\svchost.exe
                          C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                          1⤵
                            PID:4772

                          Network

                                MITRE ATT&CK Enterprise v16

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                5d118dd0-4e06-4383-85bb-9095a0d11a4d.tmp

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\5d118dd0-4e06-4383-85bb-9095a0d11a4d.tmp
                                • Size 130KB
                                • SHA256 1777f3c574001040149b4a19fb20cd37cf4fa00390247e96a7b98c93f05e8b27
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                7b68d465-8463-4d5b-8ff9-a9fd425f6968.tmp

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\7b68d465-8463-4d5b-8ff9-a9fd425f6968.tmp
                                • Size 265KB
                                • SHA256 3b3a1fa8c7b8796fb6cd0a2b188ddf46d8c9bcb134ebcd1cc407e75dbcdb8522
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                7d380a03-e755-4ca9-80f3-f9c455b13c85.tmp

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\7d380a03-e755-4ca9-80f3-f9c455b13c85.tmp
                                • Size 264KB
                                • SHA256 6e0dfb534db7799646cbd52fd0b3d6294d102f1323b29b692a0dfd1268851296
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                80069f20-e314-442e-81f8-c04df9c4dc27.tmp

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\80069f20-e314-442e-81f8-c04df9c4dc27.tmp
                                • Size 264KB
                                • SHA256 75717bd45cad7cd4932073f218463705d3bc8ec24ef00eff52ee773c1484f854
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                2939c032-7774-41ef-a5fa-ed9334b2cbf2.tmp

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2939c032-7774-41ef-a5fa-ed9334b2cbf2.tmp
                                • Size 12KB
                                • SHA256 ce4c4f909585001109aa36364574d0098573d62232b4d5dce09d8bf02ef77126
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                5104cc71-e9b3-4cfb-8e0c-acb11c1825b9.tmp

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5104cc71-e9b3-4cfb-8e0c-acb11c1825b9.tmp
                                • Size 11KB
                                • SHA256 cd617177852b5932bd2a8e9b629daa0849b5fa9ee263c23baa9252afb76d9335
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                7e0ee52f-17d3-48c7-aa15-4fdd0cf3e052.tmp

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7e0ee52f-17d3-48c7-aa15-4fdd0cf3e052.tmp
                                • Size 6B
                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                • MD5 SHA1 SHA512

                                7fc54d28-b229-4c5f-80b3-411028358a49.tmp

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7fc54d28-b229-4c5f-80b3-411028358a49.tmp
                                • Size 649B
                                • SHA256 de316b1d856dd7f2e2c83f3f78b12a3566cd1dfcaf94a415cc9cb4e9bc0702f9
                                • MD5 SHA1 SHA512 TLSH

                                84b09846-fd2e-44cc-b461-b842e5c57264.tmp

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\84b09846-fd2e-44cc-b461-b842e5c57264.tmp
                                • Size 11KB
                                • SHA256 6595d1433c0d98b4eb78e4589bc04a579de08258292acd1d6d7c7c435312345f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                3b3de805-eb04-46ab-bcaf-5290af73094c.tmp

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\3b3de805-eb04-46ab-bcaf-5290af73094c.tmp
                                • Size 2KB
                                • SHA256 3f9ff29a1cb90251eb0a3020984f3b01dc414a31db56ffdcf0c92e6bc79125bc
                                • MD5 SHA1 SHA512 TLSH

                                f8d7dd34-4d84-4197-8eb1-397f4c587c32.tmp

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f8d7dd34-4d84-4197-8eb1-397f4c587c32.tmp
                                • Size 2B
                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                • MD5 SHA1 SHA512

                                f712a450-8fe5-4dea-b248-1fbeedb3ca8b.tmp

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f712a450-8fe5-4dea-b248-1fbeedb3ca8b.tmp
                                • Size 13KB
                                • SHA256 cbff59adc7b520f0de2985ad921ee12da5b00aa0aaadd64b2862a8b11ece7f19
                                • MD5 SHA1 SHA512 SSDEEP TLSH