General
- Target candidate02_eiewfnyyiypxlgjvuxkz.dll.bin
- Size 5.9MB
- Sample260812-21mrvawfph
- SHA256 3b898b7d95f2174abb05bd348729fd6d0e016d49fa62fa5b1d93e4471bc3b612
Score
10/10
Malware Config
Targets
-
- Target candidate02_eiewfnyyiypxlgjvuxkz.dll.bin
- Size 5.9MB
- SHA256 3b898b7d95f2174abb05bd348729fd6d0e016d49fa62fa5b1d93e4471bc3b612
Score10/10-
Detects ACRStealer V4.x
-
Family: ACR stealer,GrMsk
ACR stealer (aka GrMsk stealer) is an infostealer written in C++.
-
Suspicious use of NtCreateProcessExOtherParentProcess
-
Suspicious use of NtCreateUserProcessOtherParentProcess
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext