stealc | d06ac89e4fbcde900df6b1befc193cd37d23c4fbb409bc449d1cb4abbe733645

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20/04/2024, 21:15

Target

d06ac89e4fbcde900df6b1befc193cd37d23c4fbb409bc449d1cb4abbe733645.exe
Size

300KB
MD5

1aeebe06fed542fe9e22ef0775bbbc9e
SHA1

f28e27a06c1e3087b336547c1c2ede1dcf01731c
SHA256

d06ac89e4fbcde900df6b1befc193cd37d23c4fbb409bc449d1cb4abbe733645
SHA512

576a2a27c14129fecae248163f2e9be31ec0bf5977da5566751b01e632231acfcf3e5905bbef5bf2a3d8b8be5468b84cca2b0faacc787da616f136fb51df1c56
SSDEEP

3072:YPCz0050UdM+CPYi6UowOlffw5dFhoQ53T+SZ3cue7+NHAlISvHOsTs/egpG:115Mnh6fw5dF/5HBje7+VAlHOsTs

Score

10^/10

stealc stealer

Family

stealc

http://185.172.128.209

Attributes

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5044	4256	WerFault.exe	86

C:\Users\Admin\AppData\Local\Temp\d06ac89e4fbcde900df6b1befc193cd37d23c4fbb409bc449d1cb4abbe733645.exe
"C:\Users\Admin\AppData\Local\Temp\d06ac89e4fbcde900df6b1befc193cd37d23c4fbb409bc449d1cb4abbe733645.exe"
1⤵
PID:4256
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4256 -s 1264
  2⤵
  - Program crash
  PID:5044

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4256 -ip 4256
1⤵
PID:804

memory/4256-1-0x0000000001D00000-0x0000000001E00000-memory.dmp

Filesize
1024KB

Download
memory/4256-2-0x0000000001B70000-0x0000000001B97000-memory.dmp

Filesize
156KB

Download
memory/4256-3-0x0000000000400000-0x0000000001A16000-memory.dmp

Filesize
22.1MB

Download
memory/4256-4-0x0000000000400000-0x0000000001A16000-memory.dmp

Filesize
22.1MB

Download