stealc | 1afe857d1b5f2c0ff48ebbd2f32abf11f9b310416b1273e77adc7ee37f001ff8

Submit
Reports

Overview

overview

Static

static

Samples 1/...cd.exe

windows7-x64

Samples 1/...cd.exe

windows10-2004-x64

Samples 1/...9f.exe

windows7-x64

Samples 1/...9f.exe

windows10-2004-x64

Samples 1/...95.exe

windows7-x64

Samples 1/...95.exe

windows10-2004-x64

Samples 1/...d2.exe

windows7-x64

Samples 1/...d2.exe

windows10-2004-x64

Samples 1/...6c.exe

windows7-x64

Samples 1/...6c.exe

windows10-2004-x64

Samples 1/...e8.exe

windows7-x64

Samples 1/...e8.exe

windows10-2004-x64

Samples 1/...4f.exe

windows7-x64

Samples 1/...4f.exe

windows10-2004-x64

Samples 1/...0a.exe

windows7-x64

Samples 1/...0a.exe

windows10-2004-x64

Samples 1/...a5.exe

windows7-x64

Samples 1/...a5.exe

windows10-2004-x64

Samples 1/...f4.exe

windows7-x64

Samples 1/...f4.exe

windows10-2004-x64

Samples 1/...c3.exe

windows7-x64

Samples 1/...c3.exe

windows10-2004-x64

Samples 1/...c7.exe

windows7-x64

Samples 1/...c7.exe

windows10-2004-x64

Samples 1/...26.exe

windows7-x64

Samples 1/...26.exe

windows10-2004-x64

Samples 1/...3a.exe

windows7-x64

Samples 1/...3a.exe

windows10-2004-x64

Samples 1/...91.exe

windows7-x64

Samples 1/...91.exe

windows10-2004-x64

Samples 2/...c4.exe

windows7-x64

Samples 2/...c4.exe

windows10-2004-x64

Analysis

max time kernel
64s
max time network
53s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
07-01-2024 18:26

Sharing

Copy URL

Twitter E-mail

Static task

static1

15 signatures

Behavioral task

behavioral1

Sample

Samples 1/0d69cafe700a952a621c9b5981504e30c939c3d6cc34452691fce67b2eb6c1cd.exe

Resource

win7-20231215-en

gcleaner nullmixer onlylogger dropper loader

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

Samples 1/0d69cafe700a952a621c9b5981504e30c939c3d6cc34452691fce67b2eb6c1cd.exe

Resource

win10v2004-20231222-en

fabookie gcleaner nullmixer onlylogger privateloader redline sectoprat smokeloader socelars ani pub5 she aspackv2 backdoor dropper infostealer loader rat spyware stealer trojan

windows10-2004-x64

21 signatures

150 seconds

Behavioral task

behavioral3

Sample

Samples 1/0dc8b4659b84d8d9b96e544279da980b36301253912a043b5e48c9bd7bb6e09f.exe

Resource

win7-20231215-en

snakekeylogger collection keylogger spyware stealer

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral4

Sample

Samples 1/0dc8b4659b84d8d9b96e544279da980b36301253912a043b5e48c9bd7bb6e09f.exe

Resource

win10v2004-20231222-en

collection spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral5

Sample

Samples 1/1d21da7ca3f1105e0fba4c64281c4199a1d2788bf2fd5ed975529e7a7ea6d695.exe

Resource

win7-20231215-en

agenttesla keylogger spyware stealer trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral6

Sample

Samples 1/1d21da7ca3f1105e0fba4c64281c4199a1d2788bf2fd5ed975529e7a7ea6d695.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

Samples 1/1f2a3d598734fe566de2054f3c73fd2245fc6023f0740bdbae88a076f508ebd2.exe

Resource

win7-20231215-en

fabookie nullmixer privateloader redline sectoprat vidar 706 pab777 aspackv2 dropper infostealer loader rat spyware stealer trojan

windows7-x64

17 signatures

150 seconds

Behavioral task

behavioral8

Sample

Samples 1/1f2a3d598734fe566de2054f3c73fd2245fc6023f0740bdbae88a076f508ebd2.exe

Resource

win10v2004-20231222-en

nullmixer dropper

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Samples 1/2a6e81706ec02af2afc1254ac19dcf89203bc0cefd6d6df5cf57cd9c70526c6c.exe

Resource

win7-20231215-en

lumma stealer vmprotect

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

Samples 1/2a6e81706ec02af2afc1254ac19dcf89203bc0cefd6d6df5cf57cd9c70526c6c.exe

Resource

win10v2004-20231222-en

lumma stealer vmprotect

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

Samples 1/2bee29bac294615a9d1b613ba775972cda26781938e3ae3aa60ad9737f1fbde8.exe

Resource

win7-20231215-en

stealc stealer

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Samples 1/2bee29bac294615a9d1b613ba775972cda26781938e3ae3aa60ad9737f1fbde8.exe

Resource

win10v2004-20231215-en

stealc stealer

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

Samples 1/2c17c6ecd63459b4442629093178ca786b4754244e1d879cef8520ce3e471d4f.exe

Resource

win7-20231215-en

agenttesla keylogger persistence spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral14

Sample

Samples 1/2c17c6ecd63459b4442629093178ca786b4754244e1d879cef8520ce3e471d4f.exe

Resource

win10v2004-20231222-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

Samples 1/3bb40bab103c5f34e08a2c179ea379abd37d9861d7f6ac3d56d5c0d693b4260a.exe

Resource

win7-20231129-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

Samples 1/3bb40bab103c5f34e08a2c179ea379abd37d9861d7f6ac3d56d5c0d693b4260a.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral17

Sample

Samples 1/3c36a35096a0e4ad330d8ae5953d844db3af5d0fa1780782a6a1adf32550fda5.exe

Resource

win7-20231215-en

agenttesla collection keylogger spyware stealer trojan

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral18

Sample

Samples 1/3c36a35096a0e4ad330d8ae5953d844db3af5d0fa1780782a6a1adf32550fda5.exe

Resource

win10v2004-20231222-en

agenttesla collection keylogger spyware stealer trojan

windows10-2004-x64

9 signatures

150 seconds

Behavioral task

behavioral19

Sample

Samples 1/3c5720111b5562bdbcef0ac01a7d4fcf47ad75af43f84220129c0a1abb5e65f4.exe

Resource

win7-20231215-en

agenttesla keylogger spyware stealer trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral20

Sample

Samples 1/3c5720111b5562bdbcef0ac01a7d4fcf47ad75af43f84220129c0a1abb5e65f4.exe

Resource

win10v2004-20231222-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral21

Sample

Samples 1/3d52822949346df4385fc98bf246b67f2667b4959cf15e490072ba00bbff59c3.exe

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

Samples 1/3d52822949346df4385fc98bf246b67f2667b4959cf15e490072ba00bbff59c3.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral23

Sample

Samples 1/3f3c3378e66bb67a7d1c45784e1d297a086abfd7591268e65d90ad10bd12d1c7.exe

Resource

win7-20231215-en

lumma stealer

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

Samples 1/3f3c3378e66bb67a7d1c45784e1d297a086abfd7591268e65d90ad10bd12d1c7.exe

Resource

win10v2004-20231222-en

lumma stealer

windows10-2004-x64

10 signatures

150 seconds

Behavioral task

behavioral25

Sample

Samples 1/4de3272c8195c4473cfa3c3abaaf682c7975ee0dc02f555fb5ac8588dcf3af26.exe

Resource

win7-20231215-en

agenttesla keylogger spyware stealer trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

Samples 1/4de3272c8195c4473cfa3c3abaaf682c7975ee0dc02f555fb5ac8588dcf3af26.exe

Resource

win10v2004-20231215-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral27

Sample

Samples 1/5cc02305d7b5cb0675f2ac65422a115aa44d8f28e5a2b759470d17d6bf851a3a.exe

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

Samples 1/5cc02305d7b5cb0675f2ac65422a115aa44d8f28e5a2b759470d17d6bf851a3a.exe

Resource

win10v2004-20231222-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

Samples 1/5e6e5fe247e96c09a7297b32c31880847a6827762b9afdbb7d7b46e3c0071a91.exe

Resource

win7-20231215-en

lumma stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral30

Sample

Samples 1/5e6e5fe247e96c09a7297b32c31880847a6827762b9afdbb7d7b46e3c0071a91.exe

Resource

win10v2004-20231215-en

lumma stealer

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral31

Sample

Samples 2/10f4e5b89953a29f22a64373ec33b585af9b406a18710fec96d3adab993cbcc4.exe

Resource

win7-20231215-en

agenttesla keylogger spyware stealer trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral32

Sample

Samples 2/10f4e5b89953a29f22a64373ec33b585af9b406a18710fec96d3adab993cbcc4.exe

Resource

win10v2004-20231215-en

agenttesla keylogger spyware stealer trojan

windows10-2004-x64

7 signatures

150 seconds

Report Analysis Logs

General

Target

Samples 1/2bee29bac294615a9d1b613ba775972cda26781938e3ae3aa60ad9737f1fbde8.exe
Size

253KB
MD5

09e6dc2b8078d3dd8f661b718bfa1b51
SHA1

0179a6d09224b0f764140218af8005d3d253966b
SHA256

2bee29bac294615a9d1b613ba775972cda26781938e3ae3aa60ad9737f1fbde8
SHA512

884540c36743c7488c3e117e41319e9abe48a0af708c27336550dea6a387d4d3f16970417f9b5b49d3ec11bb1872e0e7d0d2ea4a4f42af25a27995297ba6f15d
SSDEEP

3072:cFRNd9JnGLn/tFCmpnnbTLQ8lHVvJ+5vxjyOgPBWQeNUtlkq5X+blVEf:mRNd9tGLnlFJpnbTLQ8JWp+OQFtt+DI

Score

10^/10

stealc stealer

Malware Config

Extracted

Family

stealc

http://robertjohnson.top

Attributes

url_path
/e9c345fc99a4e67e.php

rc4.plain

Signatures

Stealc
Stealc is an infostealer written in C++.
stealer stealc

Processes

C:\Users\Admin\AppData\Local\Temp\Samples 1\2bee29bac294615a9d1b613ba775972cda26781938e3ae3aa60ad9737f1fbde8.exe
"C:\Users\Admin\AppData\Local\Temp\Samples 1\2bee29bac294615a9d1b613ba775972cda26781938e3ae3aa60ad9737f1fbde8.exe"
1⤵
PID:2636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2636-1-0x0000000000290000-0x0000000000390000-memory.dmp

Filesize
1024KB

Download
memory/2636-2-0x00000000001B0000-0x00000000001CB000-memory.dmp

Filesize
108KB

Download
memory/2636-3-0x0000000000400000-0x000000000062D000-memory.dmp

Filesize
2.2MB

Download
memory/2636-4-0x0000000000400000-0x000000000062D000-memory.dmp

Filesize
2.2MB

Download
memory/2636-5-0x0000000000400000-0x000000000062D000-memory.dmp

Filesize
2.2MB

Download
memory/2636-6-0x0000000000400000-0x000000000062D000-memory.dmp

Filesize
2.2MB

Download
memory/2636-7-0x00000000001B0000-0x00000000001CB000-memory.dmp

Filesize
108KB

Download