General

  • Target
    4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9.zip
  • Size 6.8MB
  • Sample261024-x9sl8sff55
  • SHA256 e7a5a3110c1b9a07cc54c2c2d8d7d1638de18b448f4b73cca274a648b205f0da
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: ChromElevator

    ChromElevator is an open-source post-exploitation tool for stealing user data from Chromium browsers.

  • Detects ChromElevator 1 IoCs
  • Detected Nirsoft tools 1 IoCs

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • NirSoft WebBrowserPassView 1 IoCs

    Password recovery tool for various web browsers

  • Custom signature
    Detect suspicious telegram bot 1 IoCs

    Detect suspicious telegram bot.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9.zip
    .zip 6.8MB
  • 4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9
    .exe 14.7MB

4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9.zip

  • SHA256 e7a5a3110c1b9a07cc54c2c2d8d7d1638de18b448f4b73cca274a648b205f0da
  • MD5 SHA1 SHA512 SSDEEP TLSH
Password
infected