Analysis
- max time kernel
149s - max time network
166s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
09/02/2026, 07:55
General
- Target Licence_Version_Loader.exe
- Size 6.9MB
- Sample260209-jsfpfsgs2g
- SHA256 00757772d873cfdf11241fc390c5ad2d2b3a27648656fe6ca502b12d9598cd6e
Malware Config
Extracted
-
stealc
-
NF11e31
-
http://158.94.211.84
-
url_path
/843cf72b27dd4a61.php
Signatures
- Stealc
Stealc is an infostealer written in C++.
- Stealc family
Processes
-
C:\Users\Admin\AppData\Local\Temp\Licence_Version_Loader.exe"C:\Users\Admin\AppData\Local\Temp\Licence_Version_Loader.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4672-3-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-13-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-11-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-10-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-9-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-7-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-6-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-5-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-4-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-1-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-0-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-12-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-8-0x0000000140000000-0x00000001400CC000-memory.dmp
memory/4672-14-0x0000000140000000-0x00000001400CC000-memory.dmp