Analysis
- max time kernel
172s - max time network
192s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
26/12/2023, 06:39
General
- Target 5a2b1ad3d3c828f03da52e4b0749c341.exe
- Size 28.0MB
- Sample231226-hevqsahca2
- SHA256 c2b88dcf9ac7f6dc3d41e1e4c2f2376886ae60c456d5e4ff51049edc39046dd4
Malware Config
Signatures
- Growtopia
Growtopa is an opensource modular stealer written in C#.
- Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5a2b1ad3d3c828f03da52e4b0749c341.exe"C:\Users\Admin\AppData\Local\Temp\5a2b1ad3d3c828f03da52e4b0749c341.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4496 -s 13122⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4496 -ip 44961⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4496-0-0x0000000075030000-0x00000000757E0000-memory.dmp
memory/4496-1-0x0000000000D80000-0x000000000471C000-memory.dmp
memory/4496-2-0x0000000075030000-0x00000000757E0000-memory.dmp
memory/4496-3-0x000000000D8D0000-0x000000000D8E0000-memory.dmp
memory/4496-4-0x0000000008B90000-0x0000000008B91000-memory.dmp
memory/4496-5-0x0000000008B90000-0x0000000008B91000-memory.dmp
memory/4496-6-0x000000000D8D0000-0x000000000D8E0000-memory.dmp
memory/4496-7-0x0000000008B90000-0x0000000008B91000-memory.dmp
memory/4496-8-0x0000000008B90000-0x0000000008B91000-memory.dmp
memory/4496-9-0x0000000008B90000-0x0000000008B91000-memory.dmp
memory/4496-10-0x000000000D8E0000-0x000000000E76C000-memory.dmp
memory/4496-11-0x0000000075030000-0x00000000757E0000-memory.dmp