a95ac2bc677174e858740f67d769b96074ebc4c02c2ce84ebe116d119e7a8c44 | Triage

Analysis

max time kernel
14s
max time network
17s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
28-04-2024 16:06

Sharing

Report Analysis Logs

General

Target

ChromicStealer.exe
Size

1.3MB
MD5

bb746986cfccef3c145c4e31955e97ab
SHA1

61a8c1d8be62a0ae611706e9da3ec489979935f7
SHA256

a95ac2bc677174e858740f67d769b96074ebc4c02c2ce84ebe116d119e7a8c44
SHA512

28d23fc520643ed12ad286b54889188be7a38969e86493f82362d78202a033bffa9f895217f41df05bd3b745e811460cb428c21c423f3d8919736baf487244a7
SSDEEP

24576:JoaBGIG9i0aXEKiX3Nz9V8Y9H7jlxki0cxS/YdxBXahGsmcPSZ9GUm7h/o7aHoH5:JorL9i0d9j9H7jlxpRxS/kxBXahGsmcQ

Score

7^/10

spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

C:\Users\Admin\AppData\Local\Temp\ChromicStealer.exe
"C:\Users\Admin\AppData\Local\Temp\ChromicStealer.exe"
1⤵
PID:888

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

memory/888-1-0x0000000000E20000-0x0000000000F4A000-memory.dmp

Filesize
1.2MB

Download