Overview

overview

10

Static

static

3

SecuriteIn...29.exe

windows10-2004-x64

10

SecuriteIn...29.exe

windows11-21h2-x64

10

Analysis

  • max time kernel
    105s
  • max time network
    137s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250410-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250410-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/04/2025, 10:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.Win64.MalwareX-gen.1919.22629.exe

  • Size

    2.4MB

  • MD5

    db2111a16754c3fc229d136f2a5e246d

  • SHA1

    58d2ddc44981a7b833a3059b263038484c7f7800

  • SHA256

    6037d6e0d87c675c64f4cda11e2ebf91ae62835a8306005fba28ac3773e81275

  • SHA512

    02a37c06f9b55a032cd980e42d0c2f7d6376d4aaa00007e47e05f241c0ed19518bac29e2cc21cae5bb28cf132bf58a07b40bbb9b266011e5ed29c4f968200eff

  • SSDEEP

    49152:gocHViZj3uJxQh4YrxQGaA7u59j4kt5iRaewAfOhN7fZx:7cieAfxQG1Ri5iRwAfy

Score
10/10
stealcsukastealer

Malware Config

Extracted

Family

stealc

Botnet

suka

C2

45.93.20.28

Attributes
  • url_path

    /3d15e67552d448ff.php

rc4.plain

Signatures

  • Stealc

    Stealc is an infostealer written in C++.

    stealerstealc
  • Stealc family
    stealc
  • Checks BIOS information in registry 2 TTPs 2 IoCs

    BIOS information is often read in order to detect sandboxing environments.

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.MalwareX-gen.1919.22629.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Win64.MalwareX-gen.1919.22629.exe"
    1⤵
    • Checks BIOS information in registry
    PID:1604

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1604-0-0x00007FF71BEF0000-0x00007FF71C589000-memory.dmp

    Filesize

    6.6MB

    Download

  • memory/1604-1-0x00007FF71BEF0000-0x00007FF71C589000-memory.dmp

    Filesize

    6.6MB

    Download