user@threatcheck.sh ~ threat-analysis
bash
$ analyze-threat HackTool:Win64/PSWDump.MY!MTB
HackTool:Win64/PSWDump.MY!MTB - Windows Defender threat signature analysis

HackTool:Win64/PSWDump.MY!MTB - Windows Defender Threat Analysis

$ cat analysis.txt
=== THREAT ANALYSIS REPORT ===
Threat Name: HackTool:Win64/PSWDump.MY!MTB
Classification:
Type:HackTool
Platform:Win64
Family:PSWDump
Detection Type:Concrete
Known malware family with identified signatures
Variant:MY
Specific signature variant within the malware family
Suffix:!MTB
Detected via machine learning and behavioral analysis
Detection Method:Behavioral
Confidence:Very High
False-Positive Risk:Low

Concrete signature match: Hack Tool - Tool used to exploit vulnerabilities for 64-bit Windows platform, family PSWDump

Summary:

HackTool:Win64/PSWDump.MY!MTB is a credential theft tool detected by its malicious behavior. It attempts to extract sensitive information, such as password hashes, from system memory (LSASS process). This is a strong indicator of a compromised system where an attacker is attempting to escalate privileges or move laterally.

Severity:
High
VDM Static Detection:
No detailed analysis available from definition files.
Known malware which is associated with this threat:
Filename: chromelevator.exe
92c4f4b7748f23d6dcd5af43595f34e4bb8e284a85d2c1647b189c1bb59a784a
06/12/2025
→VirusTotal↓Download Sample
206f479dfc4fb3e3e15f571ed1bb1fad65575a017753724fd578ac4f2d4dfe83
11/11/2025
→VirusTotal↓Download Sample
Remediation Steps:
1. Isolate the affected host from the network immediately. 2. Assume credentials on the system are compromised; reset passwords for all accounts used on this machine. 3. Investigate for the initial access vector and other signs of attacker activity.
=== END REPORT ===
$ reanalyze-threat
This analysis was last updated on 11/11/2025. Do you want to analyze it again?
$ ls available-commands/
→ cd /home
user@threatcheck.sh:~$ ▊