stealc | 2d4a9e6261487ec9f77fd6f2d16cf628cee857e54731730aa77d3db81de748d1

Analysis

max time kernel
123s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
19/04/2024, 01:43

Target

ee7217ad15c2331e7823adc7a9af7d647c412fb2df03ca7a1caeb9432c9ce2f7.exe
Size

307KB
MD5

b072a0fc0d889fcb1e47d087537e9b9f
SHA1

475ed8f71cf2ed8b0c4eee43c24fc6f930f0712e
SHA256

ee7217ad15c2331e7823adc7a9af7d647c412fb2df03ca7a1caeb9432c9ce2f7
SHA512

13794fb63d5cc68865cd90804736f13e490e4473a1538ad35743b8390b4e87b2cdbd61970a705b21d52a43c256fdd5cbc94a2f2e9cea6b78bc133d5409446bee
SSDEEP

3072:yAuYeTG3I8UpvBWkv1zHXSYp+gPkSoMWNJ+JPmM8tg85bZfThw5FMGJ3m:yNAURzrpMGNmMGpVtW5FMGl

Score

10^/10

stealc stealer

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2572	4956	WerFault.exe	91

C:\Users\Admin\AppData\Local\Temp\ee7217ad15c2331e7823adc7a9af7d647c412fb2df03ca7a1caeb9432c9ce2f7.exe
"C:\Users\Admin\AppData\Local\Temp\ee7217ad15c2331e7823adc7a9af7d647c412fb2df03ca7a1caeb9432c9ce2f7.exe"
1⤵
PID:4956
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4956 -s 1028
  2⤵
  - Program crash
  PID:2572

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4956 -ip 4956
1⤵
PID:2720

memory/4956-1-0x0000000002F50000-0x0000000003050000-memory.dmp

Filesize
1024KB

Download
memory/4956-2-0x0000000002EB0000-0x0000000002ED7000-memory.dmp

Filesize
156KB

Download
memory/4956-3-0x0000000000400000-0x0000000002D2B000-memory.dmp

Filesize
41.2MB

Download
memory/4956-4-0x0000000000400000-0x0000000002D2B000-memory.dmp

Filesize
41.2MB

Download
memory/4956-6-0x0000000002EB0000-0x0000000002ED7000-memory.dmp

Filesize
156KB

Download