stealc | 18f7be76439aaefe6284f5f932c844cac1713d18bff0eb649433dc987d18ccee

Analysis

max time kernel
147s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
19/04/2024, 09:46

Target

18f7be76439aaefe6284f5f932c844cac1713d18bff0eb649433dc987d18ccee.exe
Size

309KB
MD5

af649366fcc131eb6e2609108f6292ee
SHA1

c85153e251014851ec809d13bb595a798c1e1575
SHA256

18f7be76439aaefe6284f5f932c844cac1713d18bff0eb649433dc987d18ccee
SHA512

c846b167b6941ba17b1636ad948c591adbbc8f5676e40df0e100a1dd115f801fd10da52c0f74b458d670e30aed6d682a0a5e356a252a829d4d457619b57c0a14
SSDEEP

3072:/46cebvqS+v/+dDSuD9G+4+pERP8XdDOWljPxmkfjjbq/ymrCPdsl/2nfwBIgM7j:fDu+dDS69GrJ2tvPxVj69+PCdSYBN

Score

10^/10

stealc stealer

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4332	844	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\18f7be76439aaefe6284f5f932c844cac1713d18bff0eb649433dc987d18ccee.exe
"C:\Users\Admin\AppData\Local\Temp\18f7be76439aaefe6284f5f932c844cac1713d18bff0eb649433dc987d18ccee.exe"
1⤵
PID:844
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 844 -s 1092
  2⤵
  - Program crash
  PID:4332

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 844 -ip 844
1⤵
PID:1652

memory/844-1-0x0000000002F20000-0x0000000003020000-memory.dmp

Filesize
1024KB

Download
memory/844-2-0x0000000004A40000-0x0000000004A67000-memory.dmp

Filesize
156KB

Download
memory/844-3-0x0000000000400000-0x0000000002D2C000-memory.dmp

Filesize
41.2MB

Download
memory/844-4-0x0000000000400000-0x0000000002D2C000-memory.dmp

Filesize
41.2MB

Download