Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    11/10/2026, 16:50

General

  • Target
    slinky.exe
  • Size 47.2MB
  • Sample261011-vcmnlstyft
  • SHA256 7b1225a259e4fdf76565b4c4a786a2a91497989444378cdc0c1926ead7182c8b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 19 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\slinky.exe
    "C:\Users\Admin\AppData\Local\Temp\slinky.exe"
    1⤵
      PID:4748
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      1⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:660
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffb857dc728,0x7ffb857dc734,0x7ffb857dc740
        2⤵
          PID:2348
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,9425980137735637706,4401498075636755924,262144 --field-trial-handle=1956,i,5216094439527889556,10716955794687536004,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1944 /prefetch:2
          2⤵
            PID:804
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1792,i,11635068708240341632,2878489708734692047,524288 --field-trial-handle=1956,i,5216094439527889556,10716955794687536004,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1788 /prefetch:3
            2⤵
            • System Time Discovery
            PID:4716
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2420,i,6853622750852610485,17224940231152930944,524288 --field-trial-handle=1956,i,5216094439527889556,10716955794687536004,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2432 /prefetch:8
            2⤵
              PID:4784
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,1062782284736325963,14200116634819002873,2097152 --field-trial-handle=1956,i,5216094439527889556,10716955794687536004,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3276 /prefetch:1
              2⤵
                PID:4272
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3492,i,18023766974051683236,6759426178908761071,2097152 --field-trial-handle=1956,i,5216094439527889556,10716955794687536004,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3512 /prefetch:1
                2⤵
                  PID:4300
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4596,i,375116301246402182,9940230154410678879,2097152 --field-trial-handle=1956,i,5216094439527889556,10716955794687536004,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4520 /prefetch:1
                  2⤵
                    PID:3348
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4764,i,16284116971091012013,10923182955904859189,2097152 --field-trial-handle=1956,i,5216094439527889556,10716955794687536004,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4780 /prefetch:1
                    2⤵
                      PID:4124
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5288,i,2742187373748337939,4163606282289395693,524288 --field-trial-handle=1956,i,5216094439527889556,10716955794687536004,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5380 /prefetch:8
                      2⤵
                        PID:2024
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=240,i,13742653505890984092,18136897097785086609,524288 --field-trial-handle=1956,i,5216094439527889556,10716955794687536004,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5592 /prefetch:8
                        2⤵
                          PID:1020
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5576,i,10181333688513411801,17216260264436145732,524288 --field-trial-handle=1956,i,5216094439527889556,10716955794687536004,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5620 /prefetch:8
                          2⤵
                            PID:3284
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5572,i,17264753682668984783,8430888922580243761,524288 --field-trial-handle=1956,i,5216094439527889556,10716955794687536004,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5708 /prefetch:8
                            2⤵
                              PID:3220
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5620,i,1008969810365839739,1301110435915466370,262144 --field-trial-handle=1956,i,5216094439527889556,10716955794687536004,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5580 /prefetch:8
                              2⤵
                              • Suspicious behavior: EnumeratesProcesses
                              PID:3792
                          • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                            "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                            1⤵
                              PID:4580
                            • C:\Windows\system32\svchost.exe
                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                              1⤵
                                PID:4032

                              Network

                                    MITRE ATT&CK Enterprise v16

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    5e5e6135-3528-4d5d-b364-827e2df5cd4f.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\5e5e6135-3528-4d5d-b364-827e2df5cd4f.tmp
                                    • Size 268KB
                                    • SHA256 67ae59445d9f9a98a8c23dc8dbee9c767c5c4bd959a45740c67164c47df61f3e
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    8edc72a5-87e2-4e9a-9f4f-56e88a4f2093.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8edc72a5-87e2-4e9a-9f4f-56e88a4f2093.tmp
                                    • Size 6B
                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                    • MD5 SHA1 SHA512

                                    9740dd03-ebad-4b32-bbb1-91db7bb7ba83.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9740dd03-ebad-4b32-bbb1-91db7bb7ba83.tmp
                                    • Size 12KB
                                    • SHA256 375b7b9ee755e7a0f7dfffe53d22769d6fe2d91d9bd183063d960ee531c3beea
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    9a91204c-a06a-4420-9009-f65d470a96c4.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9a91204c-a06a-4420-9009-f65d470a96c4.tmp
                                    • Size 12KB
                                    • SHA256 597f5936af2dda0362c48a54615cb1d97df2f36a7dce96b04bbfcd17bbba7e3d
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    9e6d7d72-d284-4db5-b251-5b344202d5e8.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9e6d7d72-d284-4db5-b251-5b344202d5e8.tmp
                                    • Size 12KB
                                    • SHA256 eb3e8d4a0499653c2ae57cd0806d6ee51be29ce7de977d205ee202b742e955aa
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000007

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
                                    • Size 346KB
                                    • SHA256 a1ceb3df9fb44cafac57aa6814112f415b31d062f45029b84330a4c8b6ee2223
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    temp-index

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                    • Size 144B
                                    • SHA256 8c7322fb88bb04469559893937affafb7e67c694bdd86916d158064508df391e
                                    • MD5 SHA1 SHA512 TLSH

                                    9bc4bb7f-c491-47d5-be17-f2713750a7f7.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\9bc4bb7f-c491-47d5-be17-f2713750a7f7.tmp
                                    • Size 3KB
                                    • SHA256 04829ac88a2b19e15786c3c0c99c5f29c2a37c5dd1d7414bc504a63de9ce256d
                                    • MD5 SHA1 SHA512 TLSH

                                    c273ce4a-70dd-46db-ac9d-41d0448d34c6.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\c273ce4a-70dd-46db-ac9d-41d0448d34c6.tmp
                                    • Size 2B
                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                    • MD5 SHA1 SHA512

                                    da78e76b-c0c3-4e77-8215-57e25a235d9e.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\da78e76b-c0c3-4e77-8215-57e25a235d9e.tmp
                                    • Size 13KB
                                    • SHA256 cbff59adc7b520f0de2985ad921ee12da5b00aa0aaadd64b2862a8b11ece7f19
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    df0d611d-fda8-4e06-b1be-d8fc4a28b272.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\df0d611d-fda8-4e06-b1be-d8fc4a28b272.tmp
                                    • Size 414B
                                    • SHA256 3ba934e5249ffb20cc3f09829ecfe9ace010966dfe4ebe2f94a39c233a431510
                                    • MD5 SHA1 SHA512 TLSH

                                    af9eb254-8a81-4f15-85f4-92ec1c415a2f.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\af9eb254-8a81-4f15-85f4-92ec1c415a2f.tmp
                                    • Size 268KB
                                    • SHA256 4f3dbbf92e2a1cfb7c12224dd05e177a03d776649b2bb1bd4ae5e39edbbb6225
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    d0c47851-7b6e-417a-b0e2-111dd30fdff9.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d0c47851-7b6e-417a-b0e2-111dd30fdff9.tmp
                                    • Size 269KB
                                    • SHA256 435368736957858680a9cf4a121190d37a71c411ab02c77c2ac5979c57726232
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f0bc2059-ca1a-470b-96cb-59e157450b17.tmp

                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\f0bc2059-ca1a-470b-96cb-59e157450b17.tmp
                                    • Size 130KB
                                    • SHA256 0c9e286edc7bb85071123c3eacfb5824c2296005f566ca2564a5d834f07fd6ec
                                    • MD5 SHA1 SHA512 SSDEEP TLSH