Analysis
- max time kernel
47s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/10/2026, 12:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target file.exe
- Size 23.7MB
- Sample261022-pt7gfsey4l
- SHA256 ff1e19e355d8dfdfc22a825d46d0f78ca763443d465a1630a91949a2adc1d8be
- MD5 5d3485b589ba106e77f5ae6d016bf9f8
- SHA1 649acfd24946c0d35a6c74bed62d33b9f04b5bd3
- SHA512 0b0995b84661a136345c94e3f1b2286746ab657d5babd2da98850ab72bc29e8029f4a83fde126d45a8d16c65e55ff676abfe07032528f7b01b860fa19974def0
- SSDEEP 393216:Mni48aWOqwcBc5KUeXcb/y+HGPpPExPwK4xGH7V7V6tpFe2Q:Mn98bdVXcbq+mP1Ex/YJFe2Q
- TLSH T11A471229674BD2DBC2168230E42867F1FD2D8E54D5048D779799FDBD3DB1C2A28C22E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 704 ChromeUpdateDownloader.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 3820 wrote to memory of 704 3820 file.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3820 -
C:\ProgramData\Chromium\Network\xcj9ekzj\ChromeUpdateDownloader.exe"C:\ProgramData\Chromium\Network\xcj9ekzj\ChromeUpdateDownloader.exe" /install22⤵
- Executes dropped EXE
PID:704
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\Chromium\Network\xcj9ekzj\ChromeUpdateDownloader.exe
- Size 23.7MB
- SHA256 ff1e19e355d8dfdfc22a825d46d0f78ca763443d465a1630a91949a2adc1d8be
- MD5 5d3485b589ba106e77f5ae6d016bf9f8
- SHA1 649acfd24946c0d35a6c74bed62d33b9f04b5bd3
- SHA512 0b0995b84661a136345c94e3f1b2286746ab657d5babd2da98850ab72bc29e8029f4a83fde126d45a8d16c65e55ff676abfe07032528f7b01b860fa19974def0
- SSDEEP 393216:Mni48aWOqwcBc5KUeXcb/y+HGPpPExPwK4xGH7V7V6tpFe2Q:Mn98bdVXcbq+mP1Ex/YJFe2Q
- TLSH T11A471229674BD2DBC2168230E42867F1FD2D8E54D5048D779799FDBD3DB1C2A28C22E2
- MD5 SHA1 SHA512 SSDEEP TLSH