T1555.003 Credentials from Web Browsers in real malware
ATT&CK technique T1555.003 Credentials from Web Browsers appears in 18 publicly analyzed samples on MalwareAnalyzer by Cyble, 0.0% of the analyzed corpus. Seven-day prevalence is flat (0 recent vs 0 prior). Most associated families: Crypted, Delf, HUILoader, LokiBot, AgentTesla.
Tactics: credential-access
Prevalence in the corpus
- Samples exhibiting T1555.003: 18
- Share of analyzed corpus: 0.0%
- Last 7 days: 0 · prior 7 days: 0 (flat)
Malware families using T1555.003
- Crypted - 2 samples
- Delf - 2 samples
- HUILoader - 2 samples
- LokiBot - 2 samples
- AgentTesla - 1 sample
- Alfonso - 1 sample
Example samples
- ALMI HYDRA REQUISITION 0015-SP205005.exe - malicious
- 6bbcba7c45ed953f0937b739281638c1199034da36dfb31fb3280e6de3571e4b - malicious
- 20ccf4376c09e8d1cedaf474efe23cd561b8b5a48f6f360c99e5e587980678ac - malicious
- a3286fe12c112fcdbeb7bbeeb63a9cfb8e5be3b21eb6ba363600422914d0f7d3 - malicious
- 24f0fab64a6bf94e133ebc277737e7cbe509252bc0d2caf8236a35909caaaa24 - malicious
- 7c32810c14d99bc4e0e5b7da323072f5b5ed69a0741fcce6b343846f3d53a025 - malicious
- 554a09eb99f8dc5418a4e0f9cfb091a61dbe46d6d2cc7d4a0dce03f2c549b900 - malicious
- 38c90260a44e54102b13eae8926ff11a0404de38d59a5bc16797c22aeee709d2 - malicious
- 66dedc25ff584e9cd978098ee736a7c9766cc2aaf89fad4dd988e571332de6f3 - malicious
- e4229c1a56ae406f7db7ab360662a973f8f3b15a1bed7040918a62d6c8a99f75 - malicious
- e1c92a856c4f67c3054113642ab5be15f5766b8e335798d55b66fbc9ad5892ab - malicious
- ea31985086363dc8d9dca9df7eced875ef775b1a78a138723b105e32ba7d94b3 - malicious
- 8c3435c87304c6189dc8fd839867edb9cca804fbe07ae9db2b92563ee9c498ca - malicious
- a07b0ed764d7d1c1ecfc94da0ecd17ff910aa83abd6807d3a939456a999507cf - malicious
- 29a4bf4f2b2fe003e65424d86e857117f48a3c64865a843cd722a72f8efe4eda - malicious
- 74fb601f4970e34fdccae66aaddc5e8cc1fdb465ca2f9ee927a54a4956ba8412 - malicious
- notis pembayaran.exe - malicious
- c1c4bb461ff536b48f3d2567162cd1db27593f783b3d85191f1967ec71790f38.exe - malicious
Canonical technique definition: MITRE ATT&CK T1555.003 (ATT&CK v19.1, CC BY 4.0).
Frequently asked about T1555.003
- How common is ATT&CK T1555.003 (Credentials from Web Browsers) in real malware?
- ATT&CK technique T1555.003 Credentials from Web Browsers appears in 18 publicly analyzed samples on MalwareAnalyzer by Cyble, 0.0% of the analyzed corpus. Seven-day prevalence is flat (0 recent vs 0 prior). Most associated families: Crypted, Delf, HUILoader, LokiBot, AgentTesla.
- Which malware families use T1555.003?
- In this corpus T1555.003 is most associated with Crypted (2), Delf (2), HUILoader (2), LokiBot (2), AgentTesla (1), Alfonso (1). Counts are analyzed samples per family in which the technique was observed.
- What share of analyzed samples use T1555.003?
- 0.0% of the publicly analyzed corpus (18 of 114611 samples) exhibits T1555.003. Technique attribution comes from behavior captured during real sandbox detonation and from static analysis, not from a vendor label.
All ATT&CK techniques in the corpus · Latest analyzed threats