chromelevator | f5e7562d19063b30087fbe29e7a4e3573a9d8ec45f2ed1451728310df792f2e0

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/10/2026, 07:00

Target
2026-10-05_c05d5aa8c2d32efa9800cb4b2a885848_icedid_luca-stealer_njrat_stealc.exe
Size 1.5MB
Sample261006-hsvb6ssfqg
SHA256 f5e7562d19063b30087fbe29e7a4e3573a9d8ec45f2ed1451728310df792f2e0
MD5 c05d5aa8c2d32efa9800cb4b2a885848
SHA1 8eb2ef9e8f9d6579b984a2ac2bbad611dea44b9c
SHA512 b92fe88fe0602d0b17353c08790581f3db23c5312658f720799515de7a70aaaf54fcd1460aa8339a34871061a42480548e46740ba996f5e36c1b311c4e28dcb3
SSDEEP 49152:y5mzBE1Byb5NabLf+IgkdxeN7CGZdwOUGIZ:18GabLf+Igk/27Nw
TLSH
T1DC75121AF76139B9D1F7C0B4C9514602EAB27CAA43B0A78F57944AD71F33690E63E312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Family: ChromElevator
ChromElevator is an open-source post-exploitation tool for stealing user data from Chromium browsers.
hacktool chromelevator

Detects ChromElevator 1 IoCs

resource	yara_rule
behavioral2/memory/4772-0-0x00007FF6F33D0000-0x00007FF6F355A000-memory.dmp	family_chromelevator

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
behavioral2/memory/4772-0-0x00007FF6F33D0000-0x00007FF6F355A000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4772-0-0x00007FF6F33D0000-0x00007FF6F355A000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\2026-10-05_c05d5aa8c2d32efa9800cb4b2a885848_icedid_luca-stealer_njrat_stealc.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-05_c05d5aa8c2d32efa9800cb4b2a885848_icedid_luca-stealer_njrat_stealc.exe"
1⤵
PID:4772