Analysis
- max time kernel
149s - max time network
153s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
19/04/2026, 15:34
General
- Target jellycrackersmerch.com.exe
- Size 83KB
- Sample260419-sz2pyabs5x
- SHA256 01f2a993359b45c83849d866d77b525d1dea31dab8b587469ea28736e800f5c5
Malware Config
Signatures
- Reads data files stored by FTP clients 2 TTPs
Tries to access configuration files associated with programs like FileZilla.
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Unsecured Credentials: Credentials In Files 1 TTPs
Steal credentials from unsecured files.
- Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\jellycrackersmerch.com.exe"C:\Users\Admin\AppData\Local\Temp\jellycrackersmerch.com.exe"1⤵
- Suspicious use of FindShellTrayWindow
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4072-0-0x00007FF8919C5000-0x00007FF8919C6000-memory.dmp
memory/4072-1-0x000000001BD40000-0x000000001BDE6000-memory.dmp
memory/4072-2-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-3-0x000000001C390000-0x000000001C85E000-memory.dmp
memory/4072-4-0x000000001C920000-0x000000001C9BC000-memory.dmp
memory/4072-5-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-6-0x000000001BDF0000-0x000000001BDF8000-memory.dmp
memory/4072-7-0x000000001CA80000-0x000000001CACC000-memory.dmp
memory/4072-8-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-9-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-10-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-11-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-12-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-13-0x000000001E100000-0x000000001E410000-memory.dmp
memory/4072-14-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-15-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-16-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-17-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-18-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-19-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-20-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-21-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-22-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-23-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-24-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-25-0x000000001CC50000-0x000000001CD6E000-memory.dmp
memory/4072-26-0x000000001FD40000-0x000000001FD4C000-memory.dmp
memory/4072-27-0x00007FF8919C5000-0x00007FF8919C6000-memory.dmp
memory/4072-28-0x00007FF891710000-0x00007FF8920B1000-memory.dmp
memory/4072-35-0x000000001CC50000-0x000000001CD6E000-memory.dmp