39b0e7a74ff579e3cb3ef40c5d110a65eac18477b7f701dc3c95d76c236820b4

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 23:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
39b0e7a74ff579e3cb3ef40c5d110a65eac18477b7f701dc3c95d76c236820b4.exe
Size 28KB
Sample260910-3yxppsztcy
SHA256 39b0e7a74ff579e3cb3ef40c5d110a65eac18477b7f701dc3c95d76c236820b4
MD5 417075b443261e7777ad9881be95f1ed
SHA1 ef976e76f9c91fb3391b19c126b4848a57808318
SHA512 2e7011fce8a9090485c36ea98c85877db65f653a753a1948434a1f34e3e39b0aff55b2f3d6d351c40577e33eb63d9cea3fa24f0d3551248832e01b04b0728482
SSDEEP 384:DoQqmKkM4nN2Mn7/lfAdu0RxUailQb25oPhvdGiKV6OO2gw3Mq3sVp:7qm1UMn7/l4dN0aQoZvzs672gyL3y
TLSH
T1C0D2E842EA9370ECD5BAC671D367BA36B9F6B4514B206D9F0210885A6D71F903E3EF01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery spyware stealer

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
6	4100	39b0e7a74ff579e3cb3ef40c5d110a65eac18477b7f701dc3c95d76c236820b4.exe

Loads dropped DLL 1 IoCs

pid	Process
4100	39b0e7a74ff579e3cb3ef40c5d110a65eac18477b7f701dc3c95d76c236820b4.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
2	raw.githubusercontent.com
6	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

C:\Users\Admin\AppData\Local\Temp\39b0e7a74ff579e3cb3ef40c5d110a65eac18477b7f701dc3c95d76c236820b4.exe
"C:\Users\Admin\AppData\Local\Temp\39b0e7a74ff579e3cb3ef40c5d110a65eac18477b7f701dc3c95d76c236820b4.exe"
1⤵
- Downloads MZ/PE file
- Loads dropped DLL
PID:4100

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

autofill.txt

Path C:\Users\Admin\AppData\Local\Temp\browser\Chrome\autofill.txt
Size 23B
SHA256 dbf3feec622f728bf0ffe5e6b1bd9d4a6f28c5092b242cd8bc5b7db0fd97d750
MD5 8cba7e4568c1ea53495f22724d2d54fb
SHA1 c3fa4d453288763955972e01cdd64160b85904d1
SHA512 d9be144cdddaccba5022e06e6999574997f953e0d3f4dbc59f6722e2b32a2b669eb4b8dc793bd95f80594fd84084fed1905a235b2f05629d4cc8d80907bcb439
MD5 SHA1 SHA512

Submit Download

sqlite3.dll

Path C:\Users\Admin\AppData\Local\Temp\sqlite3.dll
Size 1.9MB
SHA256 eda5024b1cebf7eb43c500558b8f0ddbde458527ee41f13f47af0c74d973242f
MD5 2bf12a095766ed5a9db92cecd5da43f8
SHA1 a486e1f8f2873282976081dac01e13ac7e4dec20
SHA512 6287429d86deacf2d7498ba04f13e7073d74aee163788b813cbfca5c50f1f0be72b9de506f8986b397c61dbc40e96b0184fd872e2fce47fcf5be02918a81d91a
SSDEEP 24576:QvuO2mt3amzRU12pD0pPC075HJyGykHEsth0SKyyqWBhzt1Wx6:QvuVNmpDK5HJBkktWXt1G
TLSH
T11C956B4BF2B400ACD5ABC1798A53474BEAB174081730A7DF9590CB662F13BF66A7E314
MD5 SHA1 SHA512 SSDEEP TLSH