Analysis
- max time kernel
52s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/10/2026, 09:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target file.exe
- Size 25.5MB
- Sample261022-k47srabs2x
- SHA256 20127be7a27a8c2dd6fdebf7a69c59369961dbebd0fcb1d33f826d8d3efdce9c
- MD5 67d6196314f44d99f7b4f2774cf1145a
- SHA1 7962a3494a4748b3fba66046580ab0076d0fc972
- SHA512 d9b1f7d9777889aad4b750e39a4b5efb4fa0e883b28bccdadc24edabdcac30426bd681c4b213307dffb3471ec5c28ff27cf6f7f4d61cc7991736a2828ea36eaf
- SSDEEP 393216:ElYduV3dEHAfIsigHY1v+rt5u8eTfSMT3WoT2sVIRvT4G:EA0bfHY1Gr7urTf3G14G
- TLSH T1EF471229A38B02DFC36A8270597C7761FC6ED964A108DD3AD799D17C3DB1C2E28C52E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 2336 ChromeUpdateClient.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4972 wrote to memory of 2336 4972 file.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4972 -
C:\ProgramData\Google\Network\vlhdq1c4\ChromeUpdateClient.exe"C:\ProgramData\Google\Network\vlhdq1c4\ChromeUpdateClient.exe" /install22⤵
- Executes dropped EXE
PID:2336
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\Google\Network\vlhdq1c4\ChromeUpdateClient.exe
- Size 25.5MB
- SHA256 20127be7a27a8c2dd6fdebf7a69c59369961dbebd0fcb1d33f826d8d3efdce9c
- MD5 67d6196314f44d99f7b4f2774cf1145a
- SHA1 7962a3494a4748b3fba66046580ab0076d0fc972
- SHA512 d9b1f7d9777889aad4b750e39a4b5efb4fa0e883b28bccdadc24edabdcac30426bd681c4b213307dffb3471ec5c28ff27cf6f7f4d61cc7991736a2828ea36eaf
- SSDEEP 393216:ElYduV3dEHAfIsigHY1v+rt5u8eTfSMT3WoT2sVIRvT4G:EA0bfHY1Gr7urTf3G14G
- TLSH T1EF471229A38B02DFC36A8270597C7761FC6ED964A108DD3AD799D17C3DB1C2E28C52E1
- MD5 SHA1 SHA512 SSDEEP TLSH