dc0f63aec9ad42b2cab94a3567a520a757bcfa34d1dfc615842e7dc2f7490ed3.zip
- SHA256 217261fe46600a53a02ac556a9357361f4834d5ec195e6755b8939c3c3b115f6
Behavioral task
behavioral1
Sample
dc0f63aec9ad42b2cab94a3567a520a757bcfa34d1dfc615842e7dc2f7490ed3.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
dc0f63aec9ad42b2cab94a3567a520a757bcfa34d1dfc615842e7dc2f7490ed3.exe
Resource
win11ltsc2024-20260911-en
ChromElevator is an open-source post-exploitation tool for stealing user data from Chromium browsers.
| resource | yara_rule |
|---|---|
| static1/unpack001/dc0f63aec9ad42b2cab94a3567a520a757bcfa34d1dfc615842e7dc2f7490ed3 | family_chromelevator |
Free utilities often used by attackers which can steal passwords, product keys, etc.
| resource | yara_rule |
|---|---|
| static1/unpack001/dc0f63aec9ad42b2cab94a3567a520a757bcfa34d1dfc615842e7dc2f7490ed3 | Nirsoft |
Password recovery tool for various web browsers
| resource | yara_rule |
|---|---|
| static1/unpack001/dc0f63aec9ad42b2cab94a3567a520a757bcfa34d1dfc615842e7dc2f7490ed3 | WebBrowserPassView |
Detect suspicious telegram bot.
| resource | yara_rule |
|---|---|
| static1/unpack001/dc0f63aec9ad42b2cab94a3567a520a757bcfa34d1dfc615842e7dc2f7490ed3 | suspicious_telegram_bot |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/dc0f63aec9ad42b2cab94a3567a520a757bcfa34d1dfc615842e7dc2f7490ed3 |
Detects ChromElevator
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
NirSoft WebBrowserPassView
Password recovery tool for various web browsers
Detect suspicious telegram bot
Detect suspicious telegram bot.
Unsigned PE
Checks for missing Authenticode signature.