General

  • Target
    dc0f63aec9ad42b2cab94a3567a520a757bcfa34d1dfc615842e7dc2f7490ed3.zip
  • Size 6.4MB
  • Sample261024-pmvjbaeh84
  • SHA256 217261fe46600a53a02ac556a9357361f4834d5ec195e6755b8939c3c3b115f6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: ChromElevator

    ChromElevator is an open-source post-exploitation tool for stealing user data from Chromium browsers.

  • Detects ChromElevator 1 IoCs
  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Detect suspicious telegram bot 1 IoCs

    Detect suspicious telegram bot.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • dc0f63aec9ad42b2cab94a3567a520a757bcfa34d1dfc615842e7dc2f7490ed3.zip
    .zip 6.4MB
  • dc0f63aec9ad42b2cab94a3567a520a757bcfa34d1dfc615842e7dc2f7490ed3
    .exe 13.4MB

dc0f63aec9ad42b2cab94a3567a520a757bcfa34d1dfc615842e7dc2f7490ed3.zip

  • SHA256 217261fe46600a53a02ac556a9357361f4834d5ec195e6755b8939c3c3b115f6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
infected