General
- Target https://mega.nz/file/8cEmlKRT#obJCP4-qpa3Lbg2KR2nDfV4zUFs5WnqTKgMUXOPnl_M
- Sample261024-1yfebast4k
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://mega.nz/file/8cEmlKRT#obJCP4-qpa3Lbg2KR2nDfV4zUFs5WnqTKgMUXOPnl_M
Resource
win11ltsc2024-20260911-en
17 signatures
900 seconds
Malware Config
Extracted
Family
-
acrstealer
Version
-
4.5.3-alpha1
C2
-
object.eggbeateroxidant.cc
Decoy
-
cdnjs.cloudflare.com
Attributes
-
guids
f1575b64-8492-4e8b-b102-4d26e8c70371
01a034f4-51c1-7e0e-a650-137d7032a680
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.2.6187.130 Safari/537.36
xor.hex
Extracted
Family
-
acrstealer
xor.hex
Targets
-
- Target https://mega.nz/file/8cEmlKRT#obJCP4-qpa3Lbg2KR2nDfV4zUFs5WnqTKgMUXOPnl_M
Score10/10-
Family: ACR stealer,GrMsk
ACR stealer (aka GrMsk stealer) is an infostealer written in C++.