Analysis
- max time kernel
148s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
- submitted
19/04/2026, 15:34
General
- Target jellycrackersmerch.com.exe
- Size 83KB
- Sample260419-sz2pyabs5x
- SHA256 01f2a993359b45c83849d866d77b525d1dea31dab8b587469ea28736e800f5c5
Malware Config
Signatures
- Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Unsecured Credentials: Credentials In Files 1 TTPs
Steal credentials from unsecured files.
- Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jellycrackersmerch.com.exe"C:\Users\Admin\AppData\Local\Temp\jellycrackersmerch.com.exe"1⤵
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3384-0-0x00007FFD531E5000-0x00007FFD531E6000-memory.dmp
memory/3384-1-0x000000001BCF0000-0x000000001BD96000-memory.dmp
memory/3384-2-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-3-0x000000001C350000-0x000000001C81E000-memory.dmp
memory/3384-4-0x000000001C8C0000-0x000000001C95C000-memory.dmp
memory/3384-5-0x00000000015C0000-0x00000000015C8000-memory.dmp
memory/3384-6-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-7-0x000000001C990000-0x000000001C9DC000-memory.dmp
memory/3384-8-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-9-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-10-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-11-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-12-0x000000001DEE0000-0x000000001E1EE000-memory.dmp
memory/3384-13-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-14-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-15-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-16-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-17-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-18-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-19-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-20-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-21-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-22-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-23-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-24-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp
memory/3384-25-0x00000000205E0000-0x00000000205EC000-memory.dmp
memory/3384-26-0x00007FFD531E5000-0x00007FFD531E6000-memory.dmp
memory/3384-27-0x00007FFD52F30000-0x00007FFD538D1000-memory.dmp