General
- Target robloxcondogame😈.exe
- Size 9.1MB
- Sample260517-mlbcyaez6v
- SHA256 d1da03c0472d050c838a9715d2d60642dae25bf30c3877c26cb51edb877e3bb8
Score
10/10
Malware Config
Targets
-
- Target robloxcondogame😈.exe
- Size 9.1MB
- SHA256 d1da03c0472d050c838a9715d2d60642dae25bf30c3877c26cb51edb877e3bb8
Score10/10-
Detects ChromElevator
-
Family: ChromElevator
ChromElevator is an open-source post-exploitation tool for stealing user data from Chromium browsers.
-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1