Analysis

  • user interaction
    yes
  • max time kernel
    898s
  • max time network
    481s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260911-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    06/10/2026, 16:55

General

  • Target
    snos (1).zip
  • Size 65KB
  • Sample261006-vffdpsdx6l
  • SHA256 a9a18b4b55bb2fde2a7365ce86a1b22fc8ec0aafd2a436be28dfe68519aba1bb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 10 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 19 IoCs

Processes

  • C:\Windows\Explorer.exe
    C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\snos (1).zip"
    1⤵
      PID:2160
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:1468
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x22c,0x230,0x234,0x208,0x238,0x7ff814b2c728,0x7ff814b2c734,0x7ff814b2c740
        2⤵
          PID:2868
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1624,i,17131775732297613783,13794503749623613132,524288 --field-trial-handle=2196,i,10445418931049084240,8290640854541292478,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2224 /prefetch:3
          2⤵
          • System Time Discovery
          PID:3204
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1776,i,8385043468987120431,12485137391810077075,262144 --field-trial-handle=2196,i,10445418931049084240,8290640854541292478,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2192 /prefetch:2
          2⤵
            PID:4368
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,17873738281461950351,7155030936791463218,524288 --field-trial-handle=2196,i,10445418931049084240,8290640854541292478,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=1440 /prefetch:8
            2⤵
              PID:4556
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3260,i,18308725258896297354,4216025749618897985,2097152 --field-trial-handle=2196,i,10445418931049084240,8290640854541292478,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3264 /prefetch:1
              2⤵
                PID:1124
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3288,i,17996263786475579479,3794268638963289541,2097152 --field-trial-handle=2196,i,10445418931049084240,8290640854541292478,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3316 /prefetch:1
                2⤵
                  PID:520
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4420,i,2551393090740608934,3582879338640470967,2097152 --field-trial-handle=2196,i,10445418931049084240,8290640854541292478,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4460 /prefetch:2
                  2⤵
                    PID:5056
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4736,i,2055396942362508749,5068863292122528269,2097152 --field-trial-handle=2196,i,10445418931049084240,8290640854541292478,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4744 /prefetch:1
                    2⤵
                      PID:3792
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4920,i,12432056384466255191,4904301986598086353,524288 --field-trial-handle=2196,i,10445418931049084240,8290640854541292478,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4900 /prefetch:8
                      2⤵
                        PID:576
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5044,i,11814824230645734466,17961456761155993517,524288 --field-trial-handle=2196,i,10445418931049084240,8290640854541292478,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5060 /prefetch:8
                        2⤵
                          PID:900
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5440,i,5625638081221093750,5136661340139199854,524288 --field-trial-handle=2196,i,10445418931049084240,8290640854541292478,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5448 /prefetch:8
                          2⤵
                            PID:2428
                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                          1⤵
                            PID:4104
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                            1⤵
                              PID:3440

                            Network

                                  MITRE ATT&CK Enterprise v16

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  0bb0284c-36cd-4cdf-9d92-0723b3560f25.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\0bb0284c-36cd-4cdf-9d92-0723b3560f25.tmp
                                  • Size 266KB
                                  • SHA256 b1494d75915794c3a6b67e38fd3844cbdf30a538ea03eee2fac209d5eb73b49a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  2c7536c8-eb61-41d5-baa7-81fe81189bd3.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\2c7536c8-eb61-41d5-baa7-81fe81189bd3.tmp
                                  • Size 131KB
                                  • SHA256 0208e39ade30d3eab8843b8a75c64d40d0c93ac03a6fc63b00d3bb69cb9b2173
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  settings.dat

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                  • Size 40B
                                  • SHA256 b7b8a7312e0688ed5014d37ba1e12d59f39a4df9de35013891a6d7b10dc486ae
                                  • MD5 SHA1 SHA512

                                  20964f24-7ee9-49d5-a643-92d8b6c82eaf.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\20964f24-7ee9-49d5-a643-92d8b6c82eaf.tmp
                                  • Size 6B
                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                  • MD5 SHA1 SHA512

                                  495391d9-6d92-4ac8-a96d-e12995e5ecde.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\495391d9-6d92-4ac8-a96d-e12995e5ecde.tmp
                                  • Size 17KB
                                  • SHA256 825e6b89b8469681ab3913d31f35e2ef225e4dc5513297f72a50a392fcb57654
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  5a87c26e-6036-4090-8eee-e01bd4925b07.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\5a87c26e-6036-4090-8eee-e01bd4925b07.tmp
                                  • Size 11KB
                                  • SHA256 a54bf9963aceeb319158f2338bd4aa4d10d4d0a3743dd7084abcf62b897c94cc
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  38b9d6d2-c68a-4953-9af4-7f0e751c7c02.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\38b9d6d2-c68a-4953-9af4-7f0e751c7c02.tmp
                                  • Size 519B
                                  • SHA256 b5938c5c50a105d5ed8816733b2ed511f1e79cde8bb2550b9003b52c712b96e3
                                  • MD5 SHA1 SHA512 TLSH

                                  bae80992-cee9-4929-b783-b56c40597629.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\bae80992-cee9-4929-b783-b56c40597629.tmp
                                  • Size 2B
                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                  • MD5 SHA1 SHA512

                                  d8a9c4db-cd0f-4881-88b6-373e9c1317f4.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\d8a9c4db-cd0f-4881-88b6-373e9c1317f4.tmp
                                  • Size 2KB
                                  • SHA256 7717c4bbc8438538c966adc3df617fc2d61a6389d227de3ba903ad585d1fc0de
                                  • MD5 SHA1 SHA512 TLSH

                                  temp-index

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                  • Size 120B
                                  • SHA256 e3d59f0c78c8ac73688c9705db2ed72ae316d947ad5c5c192d229b468043e7d4
                                  • MD5 SHA1 SHA512 TLSH

                                  the-real-index

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                  • Size 96B
                                  • SHA256 9d03d05814a6c3f82bfcbf3c3aebe8c2d4dd554048311c96582aae73631d107b
                                  • MD5 SHA1 SHA512 TLSH

                                  f5fc4930-c92c-4919-bb42-e1bf62278a0a.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f5fc4930-c92c-4919-bb42-e1bf62278a0a.tmp
                                  • Size 649B
                                  • SHA256 ce44c9a559171cf5483dc6114f2ce21cdb2425f8dac4ae27a33ae5bd8eaccfcd
                                  • MD5 SHA1 SHA512 TLSH

                                  data_1

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1
                                  • Size 264KB
                                  • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                  • MD5 SHA1 SHA512 SSDEEP