Analysis
- max time kernel
151s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/10/2026, 01:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target file.exe
- Size 26.0MB
- Sample261022-bgaeasy19q
- SHA256 4faf26249f3174a4da05540570214f414b0fda86248ff746e2d424df178edc01
- MD5 72395908fec19b2a62023d4a7b605004
- SHA1 4b84cab48f148de1b4fd54c5e3c5a571e6f95660
- SHA512 a14969d366445184a776364444e278bca36934f6be4d51e4d95d41edb25ac9ab128d4605d0673bccb25ada90788768aa588218c605071687990277753a4b848f
- SSDEEP 393216:Aidmi8ghvXRfDhC5X4QJKuFiXPIRdIMw28cmdjR1Hku:TV8CvB1Ca5XPyIMl8BN1Eu
- TLSH T14257A051F70B04F6FF434C3645F9AB2F7B39E2DC8974C55AE428242ABAA2C1B45DC291
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 2168 GoogleMediaService.exe - Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-696679853-3915825385-3233721679-1000\Software\Microsoft\Windows\CurrentVersion\Run\ChromeUpdateDaemon64 = "\"C:\\Users\\Admin\\AppData\\Local\\Google\\Chrome\\awo0ugmceg\\GoogleMediaService.exe\" /user" file.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- Adds Run key to start application
PID:5060
-
C:\Users\Admin\AppData\Local\Google\Chrome\awo0ugmceg\GoogleMediaService.exe"C:\Users\Admin\AppData\Local\Google\Chrome\awo0ugmceg\GoogleMediaService.exe" /user1⤵
- Executes dropped EXE
PID:2168
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Google\Chrome\awo0ugmceg\GoogleMediaService.exe
- Size 26.0MB
- SHA256 4faf26249f3174a4da05540570214f414b0fda86248ff746e2d424df178edc01
- MD5 72395908fec19b2a62023d4a7b605004
- SHA1 4b84cab48f148de1b4fd54c5e3c5a571e6f95660
- SHA512 a14969d366445184a776364444e278bca36934f6be4d51e4d95d41edb25ac9ab128d4605d0673bccb25ada90788768aa588218c605071687990277753a4b848f
- SSDEEP 393216:Aidmi8ghvXRfDhC5X4QJKuFiXPIRdIMw28cmdjR1Hku:TV8CvB1Ca5XPyIMl8BN1Eu
- TLSH T14257A051F70B04F6FF434C3645F9AB2F7B39E2DC8974C55AE428242ABAA2C1B45DC291
- MD5 SHA1 SHA512 SSDEEP TLSH