Analysis
-
max time kernel
61s -
max time network
64s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
16-04-2024 13:54
Static task
static1
Behavioral task
behavioral1
Sample
Creal-Stealer-main.zip
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Creal-Stealer-main/builder.bat
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Creal-Stealer-main/install.bat
Resource
win10v2004-20240412-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
Creal-Stealer-main.zip
-
Size
471KB
-
MD5
3ecff1948c296c62475c740de3a167f8
-
SHA1
a2bd2dc7bd527898e785940025137125aac44ac8
-
SHA256
1c9bb55e5bb10bec3e52396c90ef5f28298815de8b59ba97d7cfd126da04f391
-
SHA512
8c5c848eaf7ef35fd2d38fc61be51445feed0da151622cbda480d73ac9369465daa53971c9c6530627bbd7ec1baf7db6b4f84499b4f32ef29dbce8fc3578de1f
-
SSDEEP
12288:Y9oiCtqedNidWyBIIDcDBpHoJRdfu0p3p+6Pz4WyDb:fBt5OVB3mWdfNpf4xDb
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Creal-Stealer-main.zip1⤵PID:1852
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:1608
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Documents\Creal-Stealer-main\Creal-Stealer-main\builder.bat" "1⤵PID:3376
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Documents\Creal-Stealer-main\Creal-Stealer-main\install.bat" "1⤵PID:2740
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Documents\Creal-Stealer-main\Creal-Stealer-main\builder.bat" "1⤵PID:4460
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Documents\Creal-Stealer-main\Creal-Stealer-main\install.bat" "1⤵PID:2828
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c ""C:\Users\Admin\Documents\Creal-Stealer-main\Creal-Stealer-main\install.bat" "1⤵PID:2148
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Documents\Creal-Stealer-main\Creal-Stealer-main\requirements.txt1⤵PID:3324