Resubmissions

24/03/2026, 11:55

260324-n3fvesfx2t10

15/03/2026, 07:00

260315-hsrahsdy8j10

General

  • Target
    7635dcadc6e2fb115a2d027739a863c37def467afca99179d3102518078f33ea
  • Size 2.0MB
  • Sample260324-n3fvesfx2t
  • SHA256 7635dcadc6e2fb115a2d027739a863c37def467afca99179d3102518078f33ea
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      7635dcadc6e2fb115a2d027739a863c37def467afca99179d3102518078f33ea
    • Size 2.0MB
    • SHA256 7635dcadc6e2fb115a2d027739a863c37def467afca99179d3102518078f33ea
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • BrowserSnatch

      BrowserSnatch is an open-source hacktool designed to steal user-data from various web browsers.

    • Browsersnatch family

    • Detects BrowserSnatch tool

    • Detects VenomStealer

    • VenomStealer

      VenomStealer is an information stealer written in C++.

    • Venom_stealer family

    • Drops startup file

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks