Analysis
- max time kernel
143s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240412-en - resource tags
- submitted
26/04/2024, 08:26
General
- Target 1fb40e73578701cc0fa99a9e1fd840d4.exe
- Size 261KB
- Sample240426-kbvbyscf88
- SHA256 a637cb5b10bcdf7d7f77c408b3e81af8f006f9e506c5fd47ef28cea8d8f7f1d3
Score
10/10
Malware Config
Signatures
- Stealc
Stealc is an infostealer written in C++.
- Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1fb40e73578701cc0fa99a9e1fd840d4.exe"C:\Users\Admin\AppData\Local\Temp\1fb40e73578701cc0fa99a9e1fd840d4.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1228 -s 12482⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1228 -ip 12281⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1228-2-0x0000000005C80000-0x0000000005CA7000-memory.dmp
memory/1228-1-0x00000000041E0000-0x00000000042E0000-memory.dmp
memory/1228-3-0x0000000000400000-0x0000000004032000-memory.dmp