Analysis
- max time kernel
53s - max time network
125s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/10/2026, 03:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target file.exe
- Size 25.5MB
- Sample261022-dvay4act7r
- SHA256 41ad249f4d3f2ee1e13fa60544d5ead4eb12de75404de60c2ff43f6e1fd8425b
- MD5 13f7116c89a6f6031778d8cbf193b93b
- SHA1 8d76b7939bff058c7822f498a5a570837e91d859
- SHA512 cb79ce326b842ac3b3e9ce340bd03d96283a2c50f9490aa589f8caab1553886f772354ea814bcafce25f9a1d80690f915b450275dc3f0635e6dde7d91cfe9194
- SSDEEP 393216:GkwpSfU/jL1dfuJewzG1AsRuv2bU85iUpgDn6ZS/TXL42Cu1p:sSfotU41AsIvIUEiUg6buP
- TLSH T1D0471229A38B52DFC36A8270557C7761FD2EC964A504CD3AC799C1BD3DB1C2E28C52E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 1304 GoogleUpdateCore.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 364 wrote to memory of 1304 364 file.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:364 -
C:\ProgramData\Chrome\Update Client\e0zxolq6\GoogleUpdateCore.exe"C:\ProgramData\Chrome\Update Client\e0zxolq6\GoogleUpdateCore.exe" /install22⤵
- Executes dropped EXE
PID:1304
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\Chrome\Update Client\e0zxolq6\GoogleUpdateCore.exe
- Size 25.5MB
- SHA256 41ad249f4d3f2ee1e13fa60544d5ead4eb12de75404de60c2ff43f6e1fd8425b
- MD5 13f7116c89a6f6031778d8cbf193b93b
- SHA1 8d76b7939bff058c7822f498a5a570837e91d859
- SHA512 cb79ce326b842ac3b3e9ce340bd03d96283a2c50f9490aa589f8caab1553886f772354ea814bcafce25f9a1d80690f915b450275dc3f0635e6dde7d91cfe9194
- SSDEEP 393216:GkwpSfU/jL1dfuJewzG1AsRuv2bU85iUpgDn6ZS/TXL42Cu1p:sSfotU41AsIvIUEiUg6buP
- TLSH T1D0471229A38B52DFC36A8270557C7761FD2EC964A504CD3AC799C1BD3DB1C2E28C52E2
- MD5 SHA1 SHA512 SSDEEP TLSH