Resubmissions
07-01-2024 18:26
240107-w3ameabffn 10Analysis
-
max time kernel
113s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
07-01-2024 18:26
General
-
Target
Samples 7/da52dc0f002d544115f1d64dbc1d7ec9569be150d59cfe0bfd3f6bb5aed54dc5.exe
-
Size
254KB
-
MD5
cf5cb731825863750c4b86a3df164db7
-
SHA1
044889a9bb37f16cc09c6217006e74c1b6aba492
-
SHA256
da52dc0f002d544115f1d64dbc1d7ec9569be150d59cfe0bfd3f6bb5aed54dc5
-
SHA512
d8345f6cf580d1d29998e2b54facb82807e07a0a03539475e4bf7b8d21e91d60117057a28220d0f033f8c2c9ce36b3143ae511d639a7f446064c0cf32e9f6163
-
SSDEEP
3072:NFRbzeTt7LnZ+TCUOM6qvzPOGQbFvSlnjWQYtJ4oEKq5X//lV17:XRbzep7LnoT/OxyTPIvSpS7tJC/vp
Score
10/10
Malware Config
Extracted
Family
stealc
C2
http://jaimemcgee.top
Attributes
-
url_path
/40d570f44e84a454.php
rc4.plain
Signatures
-
Stealc
Stealc is an infostealer written in C++.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Samples 7\da52dc0f002d544115f1d64dbc1d7ec9569be150d59cfe0bfd3f6bb5aed54dc5.exe"C:\Users\Admin\AppData\Local\Temp\Samples 7\da52dc0f002d544115f1d64dbc1d7ec9569be150d59cfe0bfd3f6bb5aed54dc5.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2448 -s 3882⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 2448 -ip 24481⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
108KB
-
Filesize
2.2MB
-
Filesize
2.2MB