Analysis
- max time kernel
149s - max time network
153s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
09/02/2026, 07:55
General
- Target Licence_Version_Loader.exe
- Size 5.6MB
- Sample260209-jscykags2a
- SHA256 363201a7f7d0f230f00ae92bd5e86f1a950fdb3256f1fb2717c5ea610f09bc14
Malware Config
Extracted
-
stealc
-
NF212D31
-
http://158.94.211.84
-
url_path
/843cf72b27dd4a61.php
Signatures
- Stealc
Stealc is an infostealer written in C++.
- Stealc family
Processes
-
C:\Users\Admin\AppData\Local\Temp\Licence_Version_Loader.exe"C:\Users\Admin\AppData\Local\Temp\Licence_Version_Loader.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4104-8-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-5-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-6-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-10-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-13-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-11-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-7-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-3-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-4-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-12-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-2-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-1-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-0-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-14-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4104-9-0x0000000140000000-0x00000001400CC000-memory.dmp