Analysis
- max time kernel
65s - max time network
126s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/10/2026, 04:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target file.exe
- Size 24.5MB
- Sample261022-e6dd2azy5k
- SHA256 57f4a4237a2b796dc8a4b49df6dd2d769ac170124544d5c5e3508b741e912d64
- MD5 d4efe21e94e934d11d189a5033c88ff6
- SHA1 1e5bfa55dce6ef95c8c30e49eee10632c56a3c1a
- SHA512 bc0080847214355b836d12e64c134e8cb2856a88ca298f86e395fd390c6b0a9e7e915420f800e4fe828d0c9f42c30fadab5da3d8cf2ddde78d61283ee5ca0acb
- SSDEEP 393216:hZQTC+42VSnCKhuCQJA8CRCZNC/hoz3yZE7E3KSb/Oj:Hk1muCQK8yC3C/civ6
- TLSH T164470229A34BC2DBC2168230D56867F1FC2E9D64E5048D7BD799BD7D3CB1C2A28C52E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 260 ChromeUpdateDownloader.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 828 wrote to memory of 260 828 file.exe 91
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:828 -
C:\ProgramData\Chrome\Network\dnyzieqi\ChromeUpdateDownloader.exe"C:\ProgramData\Chrome\Network\dnyzieqi\ChromeUpdateDownloader.exe" /install22⤵
- Executes dropped EXE
PID:260
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\Chrome\Network\dnyzieqi\ChromeUpdateDownloader.exe
- Size 24.5MB
- SHA256 57f4a4237a2b796dc8a4b49df6dd2d769ac170124544d5c5e3508b741e912d64
- MD5 d4efe21e94e934d11d189a5033c88ff6
- SHA1 1e5bfa55dce6ef95c8c30e49eee10632c56a3c1a
- SHA512 bc0080847214355b836d12e64c134e8cb2856a88ca298f86e395fd390c6b0a9e7e915420f800e4fe828d0c9f42c30fadab5da3d8cf2ddde78d61283ee5ca0acb
- SSDEEP 393216:hZQTC+42VSnCKhuCQJA8CRCZNC/hoz3yZE7E3KSb/Oj:Hk1muCQK8yC3C/civ6
- TLSH T164470229A34BC2DBC2168230D56867F1FC2E9D64E5048D7BD799BD7D3CB1C2A28C52E1
- MD5 SHA1 SHA512 SSDEEP TLSH