Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
23/04/2026, 15:12
General
- Target _3e4115bef12962b605b64d2e1608398cceed8adf6b0f5262931d5b174acdd623.exe
- Size 1.7MB
- Sample260423-sk7mmsgx9z
- SHA256 3e4115bef12962b605b64d2e1608398cceed8adf6b0f5262931d5b174acdd623
Malware Config
Signatures
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes
-
C:\Users\Admin\AppData\Local\Temp\_3e4115bef12962b605b64d2e1608398cceed8adf6b0f5262931d5b174acdd623.exe"C:\Users\Admin\AppData\Local\Temp\_3e4115bef12962b605b64d2e1608398cceed8adf6b0f5262931d5b174acdd623.exe"1⤵
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4696-0-0x000001FDB0910000-0x000001FDB0911000-memory.dmp
memory/4696-1-0x000001FDB0930000-0x000001FDB0931000-memory.dmp
memory/4696-2-0x00007FFD00C80000-0x00007FFD00D8C000-memory.dmp
memory/4696-4-0x000001FDB0BE0000-0x000001FDB0BE9000-memory.dmp
memory/4696-3-0x00007FF7206D0000-0x00007FF720880000-memory.dmp
memory/4696-5-0x000001FDB0930000-0x000001FDB0931000-memory.dmp
memory/4696-8-0x00007FFD00C80000-0x00007FFD00D8C000-memory.dmp
memory/4696-9-0x00007FF7206D0000-0x00007FF720880000-memory.dmp
memory/4696-14-0x000001FDB0BE0000-0x000001FDB0BE9000-memory.dmp
memory/4696-13-0x00007FF7206D0000-0x00007FF720880000-memory.dmp