Analysis
- user interaction
yes - max time kernel
264s - max time network
266s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
09/05/2026, 03:47
Static task
static1
1 signatures
General
- Target taker.exe
- Size 17.7MB
- Sample260509-ecafaaat7s
- SHA256 da66a519fa935e1345849300e58bacad444436dcae913fc096c351254d2dae4e
- MD5 0842ca100c622b28cae0b436d3e14a96
- SHA1 99ea78868e5e21a0114810d1f6705f9a7307c0c8
- SHA512 7f02d2d3f3778dc113df71461d8ae98349d6b005cbd20a15b41a383b2830f1d4ade99eda1300dc4133d143a130345804ff2d258d94ff33621bdef89cbacff623
- SSDEEP 196608:+YlvrQeZpLllkY9YPdiZR5gZ+4eOtB6tXhW:LvbZpJgP1wtxW
- TLSH T164175A12639B4DE5DDC63BB4B99B173C4720FD319E290B6F968881205C533DCAD2EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 discord.com 2 discord.com