stealc | 7ee946a36cdb7fa51dae1b2fc51ab628a7c7af1a01446c0413c0fba6aaff9a77

Analysis

max time kernel
146s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20240412-en
resource tags

arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system
submitted
22-04-2024 18:04

Target

7ee946a36cdb7fa51dae1b2fc51ab628a7c7af1a01446c0413c0fba6aaff9a77.exe
Size

270KB
MD5

8ed49d27b8ccab5a03e6e822694fdaa1
SHA1

cf47d93e906e3f93329ceeedd061be95c4b1047b
SHA256

7ee946a36cdb7fa51dae1b2fc51ab628a7c7af1a01446c0413c0fba6aaff9a77
SHA512

551ca597962d6b818e31fc7a414a7dc62e981672092a12a282a6549573138e460187df8339582c6f52f204752c00047b39b6a33ccc546d194ccc8731fcf94512
SSDEEP

3072:7dbuVgQjvaubgt72EwTK99rbtqnwS5JaGNM9J:5uVgJVtSBT0rXuaKYJ

Score

10^/10

stealc stealer

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4328	1036	WerFault.exe	77

C:\Users\Admin\AppData\Local\Temp\7ee946a36cdb7fa51dae1b2fc51ab628a7c7af1a01446c0413c0fba6aaff9a77.exe
"C:\Users\Admin\AppData\Local\Temp\7ee946a36cdb7fa51dae1b2fc51ab628a7c7af1a01446c0413c0fba6aaff9a77.exe"
1⤵
PID:1036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1036 -s 1092
  2⤵
  - Program crash
  PID:4328

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1036 -ip 1036
1⤵
PID:3196

memory/1036-1-0x0000000002F80000-0x0000000003080000-memory.dmp

Filesize
1024KB

Download
memory/1036-2-0x0000000003200000-0x0000000003227000-memory.dmp

Filesize
156KB

Download
memory/1036-3-0x0000000000400000-0x0000000002C26000-memory.dmp

Filesize
40.1MB

Download
memory/1036-4-0x0000000000400000-0x0000000002C26000-memory.dmp

Filesize
40.1MB

Download