Overview

overview

10

Static

static

10

4be93d28a5...c9.exe

windows10-2004-x64

10

4be93d28a5...c9.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9.zip
  • Size 6.8MB
  • Sample261024-x9sl8sff55
  • SHA256 e7a5a3110c1b9a07cc54c2c2d8d7d1638de18b448f4b73cca274a648b205f0da
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
chromelevatordefense_evasiondiscoveryhacktool

Malware Config

Targets

    • Target
      4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9
    • Size 14.7MB
    • SHA256 4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoverychromelevatorhacktool

    • Detects ChromElevator

    • Family: ChromElevator

      ChromElevator is an open-source post-exploitation tool for stealing user data from Chromium browsers.

      hacktoolchromelevator

    • Detected Nirsoft tools

      Free utilities often used by attackers which can steal passwords, product keys, etc.

    • NirSoft WebBrowserPassView

      Password recovery tool for various web browsers

    • Detect suspicious telegram bot

      Detect suspicious telegram bot.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks