4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9.zip
- SHA256 e7a5a3110c1b9a07cc54c2c2d8d7d1638de18b448f4b73cca274a648b205f0da
Behavioral task
behavioral1
Sample
4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9.exe
Resource
win11ltsc2024-20260911-en
ChromElevator is an open-source post-exploitation tool for stealing user data from Chromium browsers.
| resource | yara_rule |
|---|---|
| static1/unpack001/4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9 | family_chromelevator |
Free utilities often used by attackers which can steal passwords, product keys, etc.
| resource | yara_rule |
|---|---|
| static1/unpack001/4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9 | Nirsoft |
Password recovery tool for various web browsers
| resource | yara_rule |
|---|---|
| static1/unpack001/4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9 | WebBrowserPassView |
Detect suspicious telegram bot.
| resource | yara_rule |
|---|---|
| static1/unpack001/4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9 | suspicious_telegram_bot |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/4be93d28a571f23281c2f6db35d4833f2a8b6cd818fadd39d984c922a686c6c9 |
Detects ChromElevator
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
NirSoft WebBrowserPassView
Password recovery tool for various web browsers
Detect suspicious telegram bot
Detect suspicious telegram bot.
Unsigned PE
Checks for missing Authenticode signature.