Analysis
- max time kernel
148s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
14/10/2026, 00:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ChromaPulse.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ChromaPulse.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target ChromaPulse.exe
- Size 857KB
- Sample261014-axm5naea33
- SHA256 0dfc19a1923d0f66e298a58289063962ec10f65f107a33e375d07d07b5f6e14e
- MD5 194474cad3fef5d711d8232a59d9cbfd
- SHA1 654122a33497e1ecf580b62b3c2c1fb4fd2a7201
- SHA512 9f4edee31a8e1085f33e5d311a7eab0a05667884a4a3913cac8b6bbdab224cecd124faa569c3585dc8acc4bbe38b6df6cbe5a2927ddda75175b800cf6a63d6cb
- SSDEEP 12288:XP//foHvuFVC7DcjL7XMV9OXpBY2VYz4eL7mdPDJTeh4wCbDAbLot:+ulZBY2Oz4en8PDVeufXo
- TLSH T1CD158E1EA7EC02F9E0B7D678CAA68551E771780E477096DF0291459A3F236E08F39B13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-650287814-2715975232-1279715623-1000\Software\Microsoft\Windows\CurrentVersion\Run\ChromaPulse = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\ChromaPulse.exe\" --startup --minimized" ChromaPulse.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 4572 ChromaPulse.exe 4572 ChromaPulse.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 4572 ChromaPulse.exe 4572 ChromaPulse.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ChromaPulse.exe"C:\Users\Admin\AppData\Local\Temp\ChromaPulse.exe"1⤵
- Adds Run key to start application
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4572
-
C:\Users\Admin\AppData\Local\Temp\ChromaPulse.exe"C:\Users\Admin\AppData\Local\Temp\ChromaPulse.exe" --startup --minimized1⤵PID:4940
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\ChromaPulse.ini.tmp
- Size 472B
- SHA256 921f04e8a70cbb62539d97bed18908f777807451d8ee519e329c357510ae954a
- MD5 8fa0ef3f326ec99fa058cc5d4bfb51de
- SHA1 f40e49bbb655b14daae3d56a7ae374b964d8c787
- SHA512 ed0b9f214d6f664bb334ac3b7e636db1c39008bee51e2fc06ad156a2ed9adfc0f5f504ddbb747b4b0b53ec728311ab4e995088b31de5e87cbfd2fd140d157c26
- TLSH T1FBF02700534941AC683B70D99CB4C34932D35240166133B8ABFB1429FDC90AA577915D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ChromaPulse.ini.tmp
- Size 104B
- SHA256 7ee635176d44472d70e307edbcd115a0f043d36794178b52f59ae821e8386ff1
- MD5 037cb0936985e7548e0532d99113b2e6
- SHA1 9f67a0ad1857d309e122486e7f6d2923a2cf53ae
- SHA512 4457cbba6bab979ff6bb98b8c21193c2b8d7eeb92778ecbe8cb34cd967720dfcaaf40f601ba5c9ac97ef1dd3016a0bb08ec0d5640dbaa53bb19976da8e5e2edf
- TLSH T108B01220434B90FC481670272CCC18A322C94406CE1B7021D9DE0098D9F78D3939A23C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\ChromaPulse.ini.tmp
- Size 472B
- SHA256 529e996025a8a3176f204460e55af522a9965fccd89cfbdeb46be7d56a075651
- MD5 6248d544e1a907b274f50738d7b2b1f7
- SHA1 a9a8cb751b2e712969594686888dcdce8cd5ed21
- SHA512 2505815bf8974fd239872d81b49d85d0d3a17252e26ca707d2cb26c057f926250791796766369ea8044a08823f565fb4fef19eb91f13e57de459d8c52e2293f7
- TLSH T1FEF02700534941AC683B70DD9C64C34532D35140166137B8ABEB1429FDC90AB5779159
- MD5 SHA1 SHA512 TLSH