stealc | 56caa981531084a5004b039e1342059a088320bb9252d24b431c25d7752811c7

Analysis

max time kernel
140s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25/06/2024, 14:09

Target
1916-172-0x0000000000CB0000-0x000000000189E000-memory.exe
Size 11.9MB
Sample240625-rf92jaxdln
SHA256 56caa981531084a5004b039e1342059a088320bb9252d24b431c25d7752811c7
MD5 37d8a37f9bbfcf2f701ab8b4abffec6a
SHA1 a3e503206cbb7c0f8029a1fd6a052dde43eeb3dd
SHA512 7619a68fdc1be1cea0750b66a092ba35b7a39a4e7be117dab565dd9dbc604c2efd73af350873132c2b656c659e58e8a0854e5fbe85254e95e00d4091370fe12b
SSDEEP 98304:0sn2L58YAWvkq7+YvCAUq5qE1g7xs+Gkqk7Zdo/8MPum7UpJDc:9nBgHZvCAth1g7x93jojIDc
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

stealc stealer

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4428	2388	WerFault.exe	90

C:\Users\Admin\AppData\Local\Temp\1916-172-0x0000000000CB0000-0x000000000189E000-memory.exe
"C:\Users\Admin\AppData\Local\Temp\1916-172-0x0000000000CB0000-0x000000000189E000-memory.exe"
1⤵
PID:2388
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2388 -s 224
  2⤵
  - Program crash
  PID:4428

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2388 -ip 2388
1⤵
PID:3416

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1344 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:8
1⤵
PID:3192

memory/2388-0-0x0000000000CB0000-0x000000000189E000-memory.dmp

Download