stealc | a4805aa4e8b2cb5956f757d210eaa3cd8d14b9f882f483473b1c5cc9c64c441d

Analysis

max time kernel
91s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
22/04/2024, 13:17

Target

a4805aa4e8b2cb5956f757d210eaa3cd8d14b9f882f483473b1c5cc9c64c441d.exe
Size

269KB
MD5

c7a80c9c97b99a9b724cefaf68ec1ade
SHA1

8b1beda013d3d88754a666b60e1c74b4a8d67729
SHA256

a4805aa4e8b2cb5956f757d210eaa3cd8d14b9f882f483473b1c5cc9c64c441d
SHA512

e04e8cf2ccc5d16c85fe7768188d76d2b84e05a66b78284887af84173f727671d3b4a7391c27fb1128ff2e2f0e5c1be516d8af40004702f2004a59157e45dac6
SSDEEP

3072:C0quVg16F6FzuxsUY/mXGPkkPQJ+dVpNM5ZNzUlodY45J:UuVgc6FSseGPkMG+dVpNI5CQ5J

Score

10^/10

stealc stealer

Program crash 1 IoCs

pid	pid_target	Process	procid_target
5024	3220	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\a4805aa4e8b2cb5956f757d210eaa3cd8d14b9f882f483473b1c5cc9c64c441d.exe
"C:\Users\Admin\AppData\Local\Temp\a4805aa4e8b2cb5956f757d210eaa3cd8d14b9f882f483473b1c5cc9c64c441d.exe"
1⤵
PID:3220
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3220 -s 1384
  2⤵
  - Program crash
  PID:5024

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3220 -ip 3220
1⤵
PID:3076

memory/3220-1-0x0000000002EF0000-0x0000000002FF0000-memory.dmp

Filesize
1024KB

Download
memory/3220-2-0x00000000032F0000-0x0000000003317000-memory.dmp

Filesize
156KB

Download
memory/3220-3-0x0000000000400000-0x0000000002C26000-memory.dmp

Filesize
40.1MB

Download
memory/3220-4-0x0000000000400000-0x0000000002C26000-memory.dmp

Filesize
40.1MB

Download
memory/3220-5-0x00000000032F0000-0x0000000003317000-memory.dmp

Filesize
156KB

Download