Analysis
- max time kernel
32s - max time network
4s - platform
windows11-21h2_x64 - resource
win11-20260126-en - resource tags
- submitted
28/01/2026, 23:04
General
- Target file.exe
- Size 1.6MB
- Sample260128-22esmac17h
- SHA256 0da1a26f3da6f4712aca28a7cdba40f97fe228c604ce7087bc8db990dea3fc4c
Malware Config
Signatures
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Accesses cryptocurrency files/wallets, possible credential harvesting 2 TTPs
- Browser Information Discovery 1 TTPs
Enumerate browser information.
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
- Suspicious use of AdjustPrivilegeToken 18 IoCs
- Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
History
History
memory/720-44-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-56-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-59-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-55-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-54-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-53-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-52-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-51-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-50-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-49-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-48-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-47-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-46-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-45-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-43-0x0000000004620000-0x0000000004666000-memory.dmp
memory/720-42-0x00000000035C0000-0x0000000003601000-memory.dmp
memory/720-60-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-61-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-62-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-63-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-64-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-66-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-70-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-72-0x0000000003630000-0x0000000003640000-memory.dmp
memory/720-71-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-69-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-67-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-65-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-73-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-74-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-75-0x0000000003630000-0x0000000003640000-memory.dmp
memory/720-76-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-78-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-83-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-82-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-81-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-80-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-79-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-77-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-84-0x0000000003630000-0x0000000003640000-memory.dmp
memory/720-85-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-88-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-91-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-90-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-89-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-87-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-86-0x0000000003310000-0x0000000003320000-memory.dmp
memory/720-92-0x0000000003630000-0x0000000003640000-memory.dmp