Analysis
- user interaction
yes - max time kernel
148s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
29/10/2026, 23:21
General
- Target ChimiEngine/ChimiEngine.exe
- Size 49KB
- Sample261029-3cacaatz4n
- SHA256 f1bbc490831d481c5083d9f5f5b2d78602d43ff2c1d0337a947ca00be0efd946
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of FindShellTrayWindow 1 IoCs
- Suspicious use of SetWindowsHookEx 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ChimiEngine\ChimiEngine.exe"C:\Users\Admin\AppData\Local\Temp\ChimiEngine\ChimiEngine.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\ChimiEngine\runtime\bin\javaw.exe"C:\Users\Admin\AppData\Local\Temp\ChimiEngine\runtime\bin\javaw.exe" -Xmx1g -jar "C:\Users\Admin\AppData\Local\Temp\ChimiEngine\ChimiEngine.jar"2⤵
- Checks processor information in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1596-0-0x00007FF6316D0000-0x00007FF6316E4000-memory.dmp
memory/2360-6-0x0000024887530000-0x00000248877A0000-memory.dmp
memory/2360-17-0x0000024887AC0000-0x0000024887D30000-memory.dmp
memory/2360-16-0x0000024880000000-0x0000024880270000-memory.dmp
memory/2360-30-0x0000024887530000-0x00000248877A0000-memory.dmp
memory/2360-31-0x0000024880000000-0x0000024880270000-memory.dmp
memory/2360-32-0x0000024880270000-0x0000024880280000-memory.dmp
memory/2360-34-0x0000024880280000-0x0000024880290000-memory.dmp
memory/2360-37-0x0000024887AC0000-0x0000024887D30000-memory.dmp
memory/2360-39-0x00000248802A0000-0x00000248802B0000-memory.dmp
memory/2360-38-0x0000024880290000-0x00000248802A0000-memory.dmp
memory/2360-41-0x00000248802B0000-0x00000248802C0000-memory.dmp
memory/2360-43-0x00000248802C0000-0x00000248802D0000-memory.dmp
memory/2360-45-0x00000248802D0000-0x00000248802E0000-memory.dmp
memory/2360-47-0x00000248802E0000-0x00000248802F0000-memory.dmp
memory/2360-49-0x00000248802F0000-0x0000024880300000-memory.dmp
memory/2360-50-0x0000024880270000-0x0000024880280000-memory.dmp
memory/2360-53-0x0000024880300000-0x0000024880310000-memory.dmp
memory/2360-52-0x0000024880280000-0x0000024880290000-memory.dmp
memory/2360-55-0x00000248802A0000-0x00000248802B0000-memory.dmp
memory/2360-56-0x0000024880310000-0x0000024880320000-memory.dmp
memory/2360-57-0x00000248802B0000-0x00000248802C0000-memory.dmp
memory/2360-59-0x00000248802C0000-0x00000248802D0000-memory.dmp
memory/2360-61-0x0000024880320000-0x0000024880330000-memory.dmp
memory/2360-60-0x00000248802D0000-0x00000248802E0000-memory.dmp
memory/2360-62-0x00000248802E0000-0x00000248802F0000-memory.dmp
memory/2360-63-0x00000248802F0000-0x0000024880300000-memory.dmp
memory/2360-64-0x0000024880300000-0x0000024880310000-memory.dmp
memory/2360-65-0x0000024880310000-0x0000024880320000-memory.dmp
memory/2360-67-0x0000024880330000-0x0000024880340000-memory.dmp
memory/2360-70-0x0000024880340000-0x0000024880350000-memory.dmp
memory/2360-73-0x0000024880350000-0x0000024880360000-memory.dmp
memory/2360-72-0x0000024880320000-0x0000024880330000-memory.dmp
memory/2360-76-0x0000024880360000-0x0000024880370000-memory.dmp
memory/2360-80-0x0000024880380000-0x0000024880390000-memory.dmp
memory/2360-79-0x0000024880370000-0x0000024880380000-memory.dmp
memory/2360-82-0x0000024880390000-0x00000248803A0000-memory.dmp
memory/2360-84-0x00000248803A0000-0x00000248803B0000-memory.dmp
memory/2360-86-0x00000248803B0000-0x00000248803C0000-memory.dmp
memory/2360-89-0x00000248803C0000-0x00000248803D0000-memory.dmp
memory/2360-88-0x0000024880330000-0x0000024880340000-memory.dmp
memory/2360-91-0x00000248803D0000-0x00000248803E0000-memory.dmp
memory/2360-95-0x00000248803E0000-0x00000248803F0000-memory.dmp
memory/2360-94-0x0000024880340000-0x0000024880350000-memory.dmp
memory/2360-96-0x0000024880350000-0x0000024880360000-memory.dmp
memory/2360-97-0x00000248803F0000-0x0000024880400000-memory.dmp
memory/2360-99-0x0000024880360000-0x0000024880370000-memory.dmp
memory/2360-101-0x0000024880400000-0x0000024880410000-memory.dmp
memory/2360-100-0x0000024880370000-0x0000024880380000-memory.dmp
memory/2360-103-0x0000024880410000-0x0000024880420000-memory.dmp
memory/2360-105-0x0000024880380000-0x0000024880390000-memory.dmp
memory/2360-106-0x0000024880420000-0x0000024880430000-memory.dmp
memory/2360-108-0x0000024880390000-0x00000248803A0000-memory.dmp
memory/2360-109-0x0000024880430000-0x0000024880440000-memory.dmp
memory/2360-113-0x0000024880440000-0x0000024880450000-memory.dmp
memory/2360-112-0x00000248803A0000-0x00000248803B0000-memory.dmp
memory/2360-114-0x00000248803B0000-0x00000248803C0000-memory.dmp
memory/2360-115-0x0000024880450000-0x0000024880460000-memory.dmp
memory/2360-118-0x0000024880460000-0x0000024880470000-memory.dmp
memory/2360-117-0x00000248803C0000-0x00000248803D0000-memory.dmp
memory/2360-120-0x00000248803D0000-0x00000248803E0000-memory.dmp
memory/2360-121-0x0000024880470000-0x0000024880480000-memory.dmp
memory/2360-123-0x0000024880480000-0x0000024880490000-memory.dmp
memory/2360-126-0x0000024880490000-0x00000248804A0000-memory.dmp
memory/2360-125-0x00000248803F0000-0x0000024880400000-memory.dmp
memory/2360-129-0x00000248804A0000-0x00000248804B0000-memory.dmp
memory/2360-128-0x0000024880400000-0x0000024880410000-memory.dmp
memory/2360-132-0x00000248804B0000-0x00000248804C0000-memory.dmp
memory/2360-131-0x0000024880410000-0x0000024880420000-memory.dmp
memory/2360-135-0x00000248804C0000-0x00000248804D0000-memory.dmp
memory/2360-134-0x0000024880420000-0x0000024880430000-memory.dmp
memory/2360-138-0x00000248804D0000-0x00000248804E0000-memory.dmp
memory/2360-137-0x0000024880430000-0x0000024880440000-memory.dmp
memory/2360-140-0x0000024880440000-0x0000024880450000-memory.dmp
memory/2360-141-0x00000248804E0000-0x00000248804F0000-memory.dmp
memory/2360-144-0x00000248804F0000-0x0000024880500000-memory.dmp
memory/2360-143-0x0000024880450000-0x0000024880460000-memory.dmp
memory/2360-147-0x0000024880500000-0x0000024880510000-memory.dmp
memory/2360-146-0x0000024880460000-0x0000024880470000-memory.dmp
memory/2360-148-0x0000024880470000-0x0000024880480000-memory.dmp
memory/2360-150-0x0000024880480000-0x0000024880490000-memory.dmp
memory/2360-151-0x0000024880510000-0x0000024880520000-memory.dmp
memory/2360-154-0x0000024880520000-0x0000024880530000-memory.dmp
memory/2360-153-0x0000024880490000-0x00000248804A0000-memory.dmp
memory/2360-156-0x00000248804A0000-0x00000248804B0000-memory.dmp
memory/2360-157-0x00000248804B0000-0x00000248804C0000-memory.dmp
memory/2360-158-0x0000024880530000-0x0000024880540000-memory.dmp
memory/2360-159-0x00000248804C0000-0x00000248804D0000-memory.dmp
memory/2360-161-0x00000248804D0000-0x00000248804E0000-memory.dmp
memory/2360-162-0x0000024880540000-0x0000024880550000-memory.dmp
memory/2360-163-0x00000248804E0000-0x00000248804F0000-memory.dmp
memory/2360-164-0x00000248804F0000-0x0000024880500000-memory.dmp
memory/2360-165-0x0000024880500000-0x0000024880510000-memory.dmp
memory/2360-166-0x0000024880510000-0x0000024880520000-memory.dmp
memory/2360-169-0x0000024880550000-0x0000024880560000-memory.dmp
memory/2360-168-0x0000024880520000-0x0000024880530000-memory.dmp
memory/2360-170-0x0000024880530000-0x0000024880540000-memory.dmp