Analysis
- max time kernel
40s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/10/2026, 22:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Chrome.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Chrome.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target Chrome.exe
- Size 26.5MB
- Sample261020-2np2fafy7w
- SHA256 b0d939113cc42319338078e15ce241ae1e70a00f259e4d47e2dcf04deb3bb224
- MD5 fbf00e11ebf460168f7917bb47fe51e5
- SHA1 bcec76f866cc74b7dde5a01e126d1fe423d51dd7
- SHA512 bbab2e1be75aac1db93f6f35b4bb33c1c092445a296a57f323be4bca55d87e451fccc5bd64b3ac7ba2f75ed9c2e0c7e3063adff3b7c4db8cb6b5896a163d05b8
- SSDEEP 393216:IlzkYpWBXg/0n5m71Ukh8MK6BT3xGyKq+nyH9prPxN2f:Iv751UkqMfBjxGYWNf
- TLSH T1D3571228A34742DFC36A8230696C7761FD2ED9A46608CD3AD7A9C17D3DB1C2E24C57E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 848 ChromeUpdateMonitor.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4876 wrote to memory of 848 4876 Chrome.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\Chrome.exe"C:\Users\Admin\AppData\Local\Temp\Chrome.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4876 -
C:\ProgramData\Chrome\Network\0jawtnth\ChromeUpdateMonitor.exe"C:\ProgramData\Chrome\Network\0jawtnth\ChromeUpdateMonitor.exe" /install22⤵
- Executes dropped EXE
PID:848
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\Chrome\Network\0jawtnth\ChromeUpdateMonitor.exe
- Size 26.5MB
- SHA256 b0d939113cc42319338078e15ce241ae1e70a00f259e4d47e2dcf04deb3bb224
- MD5 fbf00e11ebf460168f7917bb47fe51e5
- SHA1 bcec76f866cc74b7dde5a01e126d1fe423d51dd7
- SHA512 bbab2e1be75aac1db93f6f35b4bb33c1c092445a296a57f323be4bca55d87e451fccc5bd64b3ac7ba2f75ed9c2e0c7e3063adff3b7c4db8cb6b5896a163d05b8
- SSDEEP 393216:IlzkYpWBXg/0n5m71Ukh8MK6BT3xGyKq+nyH9prPxN2f:Iv751UkqMfBjxGYWNf
- TLSH T1D3571228A34742DFC36A8230696C7761FD2ED9A46608CD3AD7A9C17D3DB1C2E24C57E1
- MD5 SHA1 SHA512 SSDEEP TLSH