Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11/10/2023, 19:14
General
-
Target
7ea53efe7909227d8d1c3b96df3f2194947459d09d6168e629dd1d089b3a9c42_JC.exe
-
Size
309KB
-
MD5
84e957df7e77de3f3899e20e49207cf2
-
SHA1
7aed17df6078a860b3eb8339390238ce8830067b
-
SHA256
7ea53efe7909227d8d1c3b96df3f2194947459d09d6168e629dd1d089b3a9c42
-
SHA512
836f470e99d71c37c380994be7b279d4a2432be1ef804f39ac76acff09277768f0983a428f1a7f465cd91c176d1905317cea92c48743a524c0acd11038751d44
-
SSDEEP
6144:0z4/KDikuQ4KmMURPlqeeR3e/dOd6/NP8dnfIW:ChDll4WmlqNR3m4oNAn9
Score
10/10
Malware Config
Extracted
Family
stealc
C2
http://bryanzachary.top
Attributes
-
url_path
/e9c345fc99a4e67e.php
rc4.plain
Signatures
-
Stealc
Stealc is an infostealer written in C++.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7ea53efe7909227d8d1c3b96df3f2194947459d09d6168e629dd1d089b3a9c42_JC.exe"C:\Users\Admin\AppData\Local\Temp\7ea53efe7909227d8d1c3b96df3f2194947459d09d6168e629dd1d089b3a9c42_JC.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1816 -s 3402⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1816 -ip 18161⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
108KB
-
Filesize
33.6MB
-
Filesize
1024KB
-
Filesize
33.6MB
-
Filesize
108KB