Analysis
- max time kernel
149s - max time network
105s - platform
windows11-21h2_x64 - resource
win11-20251015-en - resource tags
- submitted
23/10/2025, 21:58
General
- Target _4fc44a52e09eb5f24f011d5a9dde6d9b8085e988032c491ef76da2da7be5313a.exe
- Size 9.2MB
- Sample251023-1vphtaaw4e
- SHA256 4fc44a52e09eb5f24f011d5a9dde6d9b8085e988032c491ef76da2da7be5313a
Score
10/10
Malware Config
Signatures
- CrypVault
Ransomware family which makes encrypted files look like they have been quarantined by AV.
- Crypvault family
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
Processes
-
C:\Users\Admin\AppData\Local\Temp\_4fc44a52e09eb5f24f011d5a9dde6d9b8085e988032c491ef76da2da7be5313a.exe"C:\Users\Admin\AppData\Local\Temp\_4fc44a52e09eb5f24f011d5a9dde6d9b8085e988032c491ef76da2da7be5313a.exe"1⤵