stealc | 1c610b04cd3adc13e35f85762a1167cd99b5a3072e6f6b0c823758da3847b357

Analysis

max time kernel
91s
max time network
95s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
17-04-2024 19:32

Target

1c610b04cd3adc13e35f85762a1167cd99b5a3072e6f6b0c823758da3847b357.exe
Size

306KB
MD5

942f4c9696a776e6982bee3434d31345
SHA1

06ec5f2a44506b3bb4749cbeea3496647379306f
SHA256

1c610b04cd3adc13e35f85762a1167cd99b5a3072e6f6b0c823758da3847b357
SHA512

a213d68103ffb223705676329a6cf29ef3a0fae253304f67f74d58a8ae47d6659961b3a23ca50c8221abd9241e02d56f6f6d3aa23a1942af84e2d7bb7c2ed51b
SSDEEP

3072:SwbYSW5TjkwmQxWmEPJ18BgiYw+IMqvLNqott1iUPukRU6WmbnhjEyirPQFKNFm:SL57mTnrw+Ut1iUPukR3hjEyOwCF

Score

10^/10

stealc stealer

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2540	1648	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\1c610b04cd3adc13e35f85762a1167cd99b5a3072e6f6b0c823758da3847b357.exe
"C:\Users\Admin\AppData\Local\Temp\1c610b04cd3adc13e35f85762a1167cd99b5a3072e6f6b0c823758da3847b357.exe"
1⤵
PID:1648
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1648 -s 1300
  2⤵
  - Program crash
  PID:2540

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1648 -ip 1648
1⤵
PID:5096

memory/1648-2-0x0000000004B70000-0x0000000004B97000-memory.dmp

Filesize
156KB

Download
memory/1648-1-0x0000000002E30000-0x0000000002F30000-memory.dmp

Filesize
1024KB

Download
memory/1648-3-0x0000000000400000-0x0000000002D2B000-memory.dmp

Filesize
41.2MB

Download
memory/1648-4-0x0000000000400000-0x0000000002D2B000-memory.dmp

Filesize
41.2MB

Download
memory/1648-5-0x0000000004B70000-0x0000000004B97000-memory.dmp

Filesize
156KB

Download