stealc | 5a134a9d053be5eeaaeb699bc9bc733e78e36114d8e1fe837efe86512a14d319 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
24-01-2025 04:41

Sharing

Report Analysis Logs

General

Target

5a134a9d053be5eeaaeb699bc9bc733e78e36114d8e1fe837efe86512a14d319.exe
Size

455KB
MD5

117ad8836e0b9ea5e889057d4e5bd080
SHA1

78432806b2b587c92b848ea2c5d221f820c844d1
SHA256

5a134a9d053be5eeaaeb699bc9bc733e78e36114d8e1fe837efe86512a14d319
SHA512

84854a52b090bfffcbd2fd362c9544a4ef9ebf9cccea78bfcf4d667cd81109c7d8cdbadbc3964c6671cd604eed2c5bf659324999091832ddc65278d28c71221c
SSDEEP

6144:3mwyrl2Aq5eUcO+sYlO71L9Yq0DNkbtFCIQu:2wykdeO+sD7V9YvqbtFC

Score

10^/10

stealc default9_cap stealer

Malware Config

Extracted

Family

stealc

Botnet

default9_cap

C2

http://62.204.41.177

Attributes

url_path
/edd20096ecef326d.php

Signatures

Stealc
Stealc is an infostealer written in C++.
stealer stealc
Stealc family
stealc

C:\Users\Admin\AppData\Local\Temp\5a134a9d053be5eeaaeb699bc9bc733e78e36114d8e1fe837efe86512a14d319.exe
"C:\Users\Admin\AppData\Local\Temp\5a134a9d053be5eeaaeb699bc9bc733e78e36114d8e1fe837efe86512a14d319.exe"
1⤵
PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2564-1-0x0000000002D20000-0x0000000002E20000-memory.dmp

Filesize
1024KB

Download
memory/2564-2-0x0000000000230000-0x000000000027E000-memory.dmp

Filesize
312KB

Download
memory/2564-3-0x0000000000400000-0x0000000000661000-memory.dmp

Filesize
2.4MB

Download
memory/2564-6-0x0000000000400000-0x0000000000661000-memory.dmp

Filesize
2.4MB

Download
memory/2564-5-0x0000000000230000-0x000000000027E000-memory.dmp

Filesize
312KB

Download
memory/2564-4-0x0000000000400000-0x0000000002B75000-memory.dmp

Filesize
39.5MB

Download