Analysis

  • max time kernel
    899s
  • max time network
    898s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    09/10/2026, 18:43

General

  • Target
    http://instagram.com
  • Sample261009-xdds7sdf94
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 21 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://instagram.com
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4724
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff090dc728,0x7fff090dc734,0x7fff090dc740
      2⤵
        PID:3900
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,5298025098762358994,1554132455655392688,262144 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1992 /prefetch:2
        2⤵
          PID:4916
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,4499119628607402969,7347936765892877673,524288 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2152 /prefetch:3
          2⤵
          • System Time Discovery
          PID:3352
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,9778589863937830440,12020104364934684064,524288 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2392 /prefetch:8
          2⤵
            PID:3796
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3132,i,15156632929512762112,14184502426599456305,2097152 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3168 /prefetch:1
            2⤵
              PID:5052
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3164,i,3331402692671913092,4351243465809195669,2097152 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3188 /prefetch:1
              2⤵
                PID:5232
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4400,i,10149360756495569432,15230296762002951403,2097152 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4440 /prefetch:2
                2⤵
                  PID:4936
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4732,i,11143853785669695311,5056399982334701151,2097152 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4740 /prefetch:1
                  2⤵
                    PID:4760
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5724,i,1060866119527687907,17094307232730921501,524288 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5632 /prefetch:8
                    2⤵
                      PID:1624
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5748,i,14914625543823652081,15436689554173994505,524288 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5832 /prefetch:8
                      2⤵
                        PID:4220
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5744,i,5065399699689574076,251989530100827356,524288 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5292 /prefetch:8
                        2⤵
                          PID:4228
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5824,i,16716246409578724868,1171465518819576594,524288 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5316 /prefetch:8
                          2⤵
                            PID:4224
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5616,i,17984248144247243940,11765151778609798445,262144 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5628 /prefetch:8
                            2⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:4236
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=3960,i,9460325347732538599,16253290548017494343,524288 --field-trial-handle=1996,i,3915015231180215989,9313835170458692755,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5736 /prefetch:8
                            2⤵
                              PID:928
                          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                            1⤵
                              PID:5516
                            • C:\Windows\system32\svchost.exe
                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                              1⤵
                                PID:1344

                              Network

                                    MITRE ATT&CK Enterprise v16

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    03c17e09-8a5e-4eb8-8add-bf5a72df9951.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\03c17e09-8a5e-4eb8-8add-bf5a72df9951.tmp
                                    • Size 131KB
                                    • SHA256 56aa85f6a8633fae09460846647b211e93737098b00b1d6599b70e94d23f1841
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    4b6be77b-bf54-4858-b7c3-b96b5e03a3c9.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\4b6be77b-bf54-4858-b7c3-b96b5e03a3c9.tmp
                                    • Size 131KB
                                    • SHA256 444c460ebb4188be41c0bac27255859dab7618044fdb46da14b82ff2abc18fe2
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    0017349a-4102-4491-869c-9a6baa97235b.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\0017349a-4102-4491-869c-9a6baa97235b.tmp
                                    • Size 13KB
                                    • SHA256 5cc733ef9918946fc7d430f598551026826c437451b361a83b0ec84f14dfdb42
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    7221da1a-873d-4dd5-ad67-3c7aeda0bdff.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7221da1a-873d-4dd5-ad67-3c7aeda0bdff.tmp
                                    • Size 17KB
                                    • SHA256 a55c9d9bfbff27f4080d00af8282862be9cc6b021b0d1cf3b654e6d1857a1705
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    8bc79a73-e563-4b88-87d8-a64600ee6056.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8bc79a73-e563-4b88-87d8-a64600ee6056.tmp
                                    • Size 6B
                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                    • MD5 SHA1 SHA512

                                    temp-index

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                    • Size 576B
                                    • SHA256 8c7773135d582614295693dd56a546288f07df21b1b147f359582283c3b958eb
                                    • MD5 SHA1 SHA512 TLSH

                                    03899fa6-6ccd-49c0-80d3-95c690b7e99e.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\03899fa6-6ccd-49c0-80d3-95c690b7e99e.tmp
                                    • Size 2B
                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                    • MD5 SHA1 SHA512

                                    3c39745d-74e5-4d50-ad14-e2e8ae061df8.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\3c39745d-74e5-4d50-ad14-e2e8ae061df8.tmp
                                    • Size 4KB
                                    • SHA256 154e72463c3795d07a8ddf424fe61335dd55cb425359e297b3c1eb76bb7b0214
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    5d675447-1061-4331-b5f1-89e7e1ea4901.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\5d675447-1061-4331-b5f1-89e7e1ea4901.tmp
                                    • Size 4KB
                                    • SHA256 dfb1821f9cfacb2b7a7d811a9b7d395c4649038ba7a486e61f09851b84dc6e4a
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    8043fcfe-ef19-486d-939a-7101f196e5f7.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\8043fcfe-ef19-486d-939a-7101f196e5f7.tmp
                                    • Size 1KB
                                    • SHA256 c00f3a22a54d5664f94f58a492592e038b444bcf3e3e09c8ee12230a4c300c07
                                    • MD5 SHA1 SHA512 TLSH

                                    8585ccca-9813-4ff4-b8c1-22fdd9ed3722.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\8585ccca-9813-4ff4-b8c1-22fdd9ed3722.tmp
                                    • Size 1KB
                                    • SHA256 18d2516a44569a35aba0effa3f61a8e03b8ebb60d3c9c4d113fb122c1c41e0a2
                                    • MD5 SHA1 SHA512 TLSH

                                    9294f48b-21c3-4eeb-ac37-daeec082db43.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\9294f48b-21c3-4eeb-ac37-daeec082db43.tmp
                                    • Size 4KB
                                    • SHA256 6c4b0b8eac408ec97f9c9ee976dd7740b56e18e3f2de3e9af277b9eec575b4b3
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ae476fbb-955b-47ea-8fb9-de1eaae3313a.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\ae476fbb-955b-47ea-8fb9-de1eaae3313a.tmp
                                    • Size 4KB
                                    • SHA256 01f39aa17823817c89c2b50f6e33af17130eec7033b72071f0e676c07ab264d5
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    temp-index

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                    • Size 120B
                                    • SHA256 aa0d37407fdbd39467b16af41ae9f1cacbeb0d4646fdaaa34204e43b54e61565
                                    • MD5 SHA1 SHA512 TLSH

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                    • Size 96B
                                    • SHA256 1c89e0d5460abad007c68eb0d602b80e52d691f90c19f8855c11dc0a8414eeb7
                                    • MD5 SHA1 SHA512 TLSH

                                    cfb85199-e5be-48c7-8236-e7ab58a367e3.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\cfb85199-e5be-48c7-8236-e7ab58a367e3.tmp
                                    • Size 13KB
                                    • SHA256 5714468b216dc1c0b1e61438dcdb5a4666a183995d66e50438535b782d57a8a6
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    fa5e8279-8b07-4fc5-8fe6-53a834954cec.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\fa5e8279-8b07-4fc5-8fe6-53a834954cec.tmp
                                    • Size 414B
                                    • SHA256 8be081b7ecd17adfe5d67fc6b8a57377a2c4d25731438d1b433df4fdee65cf23
                                    • MD5 SHA1 SHA512 TLSH

                                    b02b752f-e8f7-478c-a50c-3ad4e4633ef6.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\b02b752f-e8f7-478c-a50c-3ad4e4633ef6.tmp
                                    • Size 131KB
                                    • SHA256 55ac4001591e1564b6eb5ac12ca050c36fae403da89ab23716655da80d89743e
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    e7550cf5-99df-493c-8293-c59fa900d516.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\e7550cf5-99df-493c-8293-c59fa900d516.tmp
                                    • Size 131KB
                                    • SHA256 bc843145bfa60175d7e5bff69564b2dc5124050ae1510076ce5ba007a7dde0ec
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    fd37a1cb-4fff-4b09-8df2-55f2e3f380d9.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\fd37a1cb-4fff-4b09-8df2-55f2e3f380d9.tmp
                                    • Size 130KB
                                    • SHA256 8eb99cf1a05bcbb6efa6c1a35f128f657423f53b26aad06dd2b0d2b73c90ca68
                                    • MD5 SHA1 SHA512 SSDEEP TLSH