Analysis
- max time kernel
149s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
08/08/2026, 17:15
General
- Target acfb95db0d53219b6390f0973e2dce63.exe
- Size 419KB
- Sample260808-vsx5aa1emf
- SHA256 6c3290de54b94a0df32b50a045ea0f90380c7b57bd8992f6a71cca6b1ad2574f
Malware Config
Signatures
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\acfb95db0d53219b6390f0973e2dce63.exe"C:\Users\Admin\AppData\Local\Temp\acfb95db0d53219b6390f0973e2dce63.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4004-0-0x0000000000C90000-0x0000000000D00000-memory.dmp
memory/4004-1-0x0000000005640000-0x0000000005650000-memory.dmp
memory/4004-2-0x00000000057C0000-0x00000000057DA000-memory.dmp
memory/4004-3-0x0000000005800000-0x000000000582C000-memory.dmp
memory/4004-9-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-33-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-91-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-129-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-127-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-125-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-123-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-121-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-119-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-117-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-115-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-113-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-111-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-69-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-109-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-107-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-105-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-103-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-101-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-99-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-97-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-95-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-93-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-89-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-87-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-85-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-83-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-81-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-79-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-77-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-75-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-73-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-71-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-65-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-63-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-61-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-59-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-57-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-55-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-53-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-51-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-49-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-47-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-45-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-43-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-41-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-39-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-37-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-35-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-31-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-29-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-27-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-25-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-23-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-21-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-67-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-19-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-17-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-15-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-13-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-11-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-7-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-5-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-4-0x0000000005800000-0x0000000005826000-memory.dmp
memory/4004-630-0x0000000005A90000-0x0000000005AF6000-memory.dmp
memory/4004-633-0x0000000006EA0000-0x0000000006F32000-memory.dmp
memory/4004-634-0x00000000074F0000-0x0000000007A94000-memory.dmp
memory/4004-635-0x0000000005640000-0x0000000005650000-memory.dmp
memory/4004-636-0x0000000007BA0000-0x0000000007C70000-memory.dmp