0d0f4283c7a35dbcfcb09d7ca7108db6f12ac3582419397e350373d292e2204b.zip
- SHA256 6f063c7c5ef5bdb4437254f4c2bd4cc2cfb54a37e3cd4ec39ecd8d82a5bbdf1a
Password
infected
General
- Target 0d0f4283c7a35dbcfcb09d7ca7108db6f12ac3582419397e350373d292e2204b.zip
- Size 6.8MB
- Sample261101-vmrqbacf95
- SHA256 6f063c7c5ef5bdb4437254f4c2bd4cc2cfb54a37e3cd4ec39ecd8d82a5bbdf1a
Score
10/10
Malware Config
Signatures
- Family: ChromElevator
ChromElevator is an open-source post-exploitation tool for stealing user data from Chromium browsers.
- Detects ChromElevator 1 IoCs
- Detected Nirsoft tools 1 IoCs
Free utilities often used by attackers which can steal passwords, product keys, etc.
- NirSoft WebBrowserPassView 1 IoCs
Password recovery tool for various web browsers
- Custom signatureDetect suspicious telegram bot 1 IoCs
Detect suspicious telegram bot.
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
File Explorer
-
0d0f4283c7a35dbcfcb09d7ca7108db6f12ac3582419397e350373d292e2204b.zip
-
0d0f4283c7a35dbcfcb09d7ca7108db6f12ac3582419397e350373d292e2204b