Analysis
- max time kernel
54s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/10/2026, 23:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Chrome.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Chrome.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target Chrome.exe
- Size 23.9MB
- Sample261020-3gqvtsdf49
- SHA256 778b8e29d82b397dc9f31149a26bcc30445b882907d45f2a4c2df806e789f393
- MD5 148af5893d6de87b6a5be783490ff3aa
- SHA1 6d4c81b2adc873c1c493d5a1292e852cb5428782
- SHA512 2501275b2513bdd5eb68087917d6b4e7e508da82920927aaa32dc6975dcf8e123bb9adf61d72f45e8aa6da898bd6010d354a0412552d788ca912e826eb05c21d
- SSDEEP 393216:TI3slV93NtJr5Ynjs3T2G2udvKlugtsz1xYROPkIoUila97hx:s8BNGa2G26vyuoszww/1x
- TLSH T126471229674B01DFC32A8230697EA761FC2ED964A108DD3AD799D1BD3CB1C2E64C53E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 2668 chrome_update_service64.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 3260 wrote to memory of 2668 3260 Chrome.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\Chrome.exe"C:\Users\Admin\AppData\Local\Temp\Chrome.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3260 -
C:\ProgramData\Chrome\Client State\b2covmon\chrome_update_service64.exe"C:\ProgramData\Chrome\Client State\b2covmon\chrome_update_service64.exe" /install22⤵
- Executes dropped EXE
PID:2668
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\Chrome\Client State\b2covmon\chrome_update_service64.exe
- Size 23.9MB
- SHA256 778b8e29d82b397dc9f31149a26bcc30445b882907d45f2a4c2df806e789f393
- MD5 148af5893d6de87b6a5be783490ff3aa
- SHA1 6d4c81b2adc873c1c493d5a1292e852cb5428782
- SHA512 2501275b2513bdd5eb68087917d6b4e7e508da82920927aaa32dc6975dcf8e123bb9adf61d72f45e8aa6da898bd6010d354a0412552d788ca912e826eb05c21d
- SSDEEP 393216:TI3slV93NtJr5Ynjs3T2G2udvKlugtsz1xYROPkIoUila97hx:s8BNGa2G26vyuoszww/1x
- TLSH T126471229674B01DFC32A8230697EA761FC2ED964A108DD3AD799D1BD3CB1C2E64C53E1
- MD5 SHA1 SHA512 SSDEEP TLSH