stealc | 1c610b04cd3adc13e35f85762a1167cd99b5a3072e6f6b0c823758da3847b357

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
17-04-2024 19:32

Target

1c610b04cd3adc13e35f85762a1167cd99b5a3072e6f6b0c823758da3847b357.exe
Size

306KB
MD5

942f4c9696a776e6982bee3434d31345
SHA1

06ec5f2a44506b3bb4749cbeea3496647379306f
SHA256

1c610b04cd3adc13e35f85762a1167cd99b5a3072e6f6b0c823758da3847b357
SHA512

a213d68103ffb223705676329a6cf29ef3a0fae253304f67f74d58a8ae47d6659961b3a23ca50c8221abd9241e02d56f6f6d3aa23a1942af84e2d7bb7c2ed51b
SSDEEP

3072:SwbYSW5TjkwmQxWmEPJ18BgiYw+IMqvLNqott1iUPukRU6WmbnhjEyirPQFKNFm:SL57mTnrw+Ut1iUPukR3hjEyOwCF

Score

10^/10

stealc stealer

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1880	2644	WerFault.exe	85

C:\Users\Admin\AppData\Local\Temp\1c610b04cd3adc13e35f85762a1167cd99b5a3072e6f6b0c823758da3847b357.exe
"C:\Users\Admin\AppData\Local\Temp\1c610b04cd3adc13e35f85762a1167cd99b5a3072e6f6b0c823758da3847b357.exe"
1⤵
PID:2644
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2644 -s 1272
  2⤵
  - Program crash
  PID:1880

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2644 -ip 2644
1⤵
PID:3568

memory/2644-1-0x0000000002DD0000-0x0000000002ED0000-memory.dmp

Filesize
1024KB

Download
memory/2644-2-0x0000000004940000-0x0000000004967000-memory.dmp

Filesize
156KB

Download
memory/2644-3-0x0000000000400000-0x0000000002D2B000-memory.dmp

Filesize
41.2MB

Download
memory/2644-4-0x0000000000400000-0x0000000002D2B000-memory.dmp

Filesize
41.2MB

Download
memory/2644-5-0x0000000004940000-0x0000000004967000-memory.dmp

Filesize
156KB

Download