Analysis
- max time kernel
149s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
27/07/2026, 03:08
General
- Target gvvjovr.exe
- Size 413KB
- Sample260727-dnbxtagl6v
- SHA256 74ef9ec23bb1172da7e97051dda1cf54d6031e64bb14aa2477520ead4c805d56
Malware Config
Signatures
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\gvvjovr.exe"C:\Users\Admin\AppData\Local\Temp\gvvjovr.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3728-0-0x00000000741D2000-0x00000000741D3000-memory.dmp
memory/3728-1-0x0000000000A30000-0x0000000000A9E000-memory.dmp
memory/3728-2-0x00000000741C0000-0x000000007497C000-memory.dmp
memory/3728-3-0x0000000005530000-0x000000000554A000-memory.dmp
memory/3728-4-0x0000000005570000-0x000000000559C000-memory.dmp
memory/3728-18-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-122-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-130-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-128-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-126-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-124-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-120-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-118-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-116-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-114-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-112-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-110-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-108-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-106-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-104-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-102-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-99-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-97-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-94-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-92-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-90-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-88-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-86-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-84-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-80-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-78-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-76-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-75-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-66-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-70-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-68-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-64-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-62-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-60-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-58-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-56-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-54-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-52-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-50-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-48-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-46-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-44-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-42-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-40-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-39-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-36-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-34-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-32-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-30-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-28-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-26-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-24-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-22-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-20-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-16-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-100-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-14-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-82-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-12-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-72-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-10-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-8-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-6-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-5-0x0000000005570000-0x0000000005596000-memory.dmp
memory/3728-629-0x0000000005C10000-0x0000000005C76000-memory.dmp
memory/3728-632-0x0000000006B10000-0x0000000006BA2000-memory.dmp
memory/3728-633-0x0000000007170000-0x000000000772A000-memory.dmp
memory/3728-634-0x00000000741D2000-0x00000000741D3000-memory.dmp
memory/3728-635-0x00000000741C0000-0x000000007497C000-memory.dmp