metastealer | 44da3ca5779035a8983b30c763391942f2290a12d0da267fe6f67420a5680ed7 | Triage

Analysis

max time kernel
41s
max time network
28s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
15-04-2022 00:59

Sharing

Report Analysis Logs

General

Target

44da3ca5779035a8983b30c763391942f2290a12d0da267fe6f67420a5680ed7.exe
Size

8KB
MD5

40d6c0c3ae818ee78a36c1414b96e62d
SHA1

faaf7efd0144904ffea2e3aae360658c4b268db9
SHA256

44da3ca5779035a8983b30c763391942f2290a12d0da267fe6f67420a5680ed7
SHA512

2e93a3de6a2b9c3c541648e432b6e99d60809500b0ed35a033f7331b373d65479a8c6bd258842cb92cb4d6504a2ad8266fed87806a02ff523ecb1ff827dbec6f

Score

10^/10

metastealer stealer

Malware Config

Signatures

Meta Stealer Stealer
Meta Stealer steals passwords stored in browsers, written in C++.
stealer metastealer

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4468	1760	WerFault.exe	74

C:\Users\Admin\AppData\Local\Temp\44da3ca5779035a8983b30c763391942f2290a12d0da267fe6f67420a5680ed7.exe
"C:\Users\Admin\AppData\Local\Temp\44da3ca5779035a8983b30c763391942f2290a12d0da267fe6f67420a5680ed7.exe"
1⤵
PID:1760
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1760 -s 812
  2⤵
  - Program crash
  PID:4468

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 428 -p 1760 -ip 1760
1⤵
PID:4100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1760-130-0x0000000000530000-0x0000000000538000-memory.dmp

Filesize
32KB

Download
memory/1760-131-0x000000001B640000-0x000000001BB68000-memory.dmp

Filesize
5.2MB

Download
memory/1760-133-0x000000001B0A0000-0x000000001B0A2000-memory.dmp

Filesize
8KB

Download
memory/1760-132-0x00007FF895FC0000-0x00007FF896A81000-memory.dmp

Filesize
10.8MB

Download