Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
17-04-2024 14:34
General
-
Target
ff7167a57007b5368518b03e82ae9110aa55ba9e947719308a416f3aecdc75e1.exe
-
Size
259KB
-
MD5
e3a7a1f3322bad231e8e81d5e78452ed
-
SHA1
66b161168b4e03446fa6f1d5f5bf4b0ce8da6f05
-
SHA256
ff7167a57007b5368518b03e82ae9110aa55ba9e947719308a416f3aecdc75e1
-
SHA512
181110932f0f9a2469a775e67f7712279ec92f6811dc3c38f8acb27510b3590fe5882db1b0552d63f87dc844ad727e6896d92550c482efe3280e7705ec8ccab7
-
SSDEEP
3072:uLpISZhvIWX20528m8u1GWakdKjuYjVL1BQ58Urov0dRRjxM6P0s4iNx1FGLVc:SuSZhgWXPWPvYlJv0f41sEc
Score
10/10
Malware Config
Extracted
Family
stealc
C2
http://185.172.128.79
Attributes
-
url_path
/3886d2276f6914c4.php
rc4.plain
Signatures
-
Stealc
Stealc is an infostealer written in C++.
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ff7167a57007b5368518b03e82ae9110aa55ba9e947719308a416f3aecdc75e1.exe"C:\Users\Admin\AppData\Local\Temp\ff7167a57007b5368518b03e82ae9110aa55ba9e947719308a416f3aecdc75e1.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1528 -s 3362⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1528 -ip 15281⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
112KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
112KB