stealc | 0128a0ef055ce1ba8f0aa14c0f4cd7a2c61f58f5022cc03ef741fab515bb0fb9

Analysis

max time kernel
90s
max time network
93s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
26/04/2024, 17:53

Target

0128a0ef055ce1ba8f0aa14c0f4cd7a2c61f58f5022cc03ef741fab515bb0fb9.exe
Size

307KB
MD5

f5be0e7433385a7d73bc97ac731d8429
SHA1

35f0a027339366e8ba2555f5db8c3381da321479
SHA256

0128a0ef055ce1ba8f0aa14c0f4cd7a2c61f58f5022cc03ef741fab515bb0fb9
SHA512

a216b85f5f453c0becd7cd2801559426aaa7ed4243b09bca3f888e5775d485efa79e3d7a1ec4f0aba78a6586bc55286dda592f3e2b08cc34aedc4033d151f227
SSDEEP

3072:XTUPDsAErxepl+sdrOM+1YEewkZgnanZz1y+HQ0mmjjSGouSmIfaiQJGESXFqNcB:Xc4MfrVr6anPQACGorBfaiQJGfXecB

Score

10^/10

stealc stealer

Program crash 1 IoCs

pid	pid_target	Process	procid_target
252	1140	WerFault.exe	77

C:\Users\Admin\AppData\Local\Temp\0128a0ef055ce1ba8f0aa14c0f4cd7a2c61f58f5022cc03ef741fab515bb0fb9.exe
"C:\Users\Admin\AppData\Local\Temp\0128a0ef055ce1ba8f0aa14c0f4cd7a2c61f58f5022cc03ef741fab515bb0fb9.exe"
1⤵
PID:1140
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1140 -s 1116
  2⤵
  - Program crash
  PID:252

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1140 -ip 1140
1⤵
PID:4836

memory/1140-1-0x00000000040F0000-0x00000000041F0000-memory.dmp

Filesize
1024KB

Download
memory/1140-2-0x0000000005D40000-0x0000000005D67000-memory.dmp

Filesize
156KB

Download
memory/1140-3-0x0000000000400000-0x000000000403D000-memory.dmp

Filesize
60.2MB

Download
memory/1140-4-0x0000000000400000-0x000000000403D000-memory.dmp

Filesize
60.2MB

Download