Analysis
- max time kernel
298s - max time network
281s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260130-en - resource tags
- submitted
31/03/2026, 12:17
General
- Target Setup.exe
- Size 1.9MB
- Sample260331-pf2n2sds51
- SHA256 cdb373dede5ca06fa8ef4c4db2a62b3bcb71945db31597c983f4d151f9b148be
Malware Config
Extracted
-
stealc
-
ssssssssss21
-
http://5.10.217.60
-
url_path
/c14fbedecd404e0eba6c.php
Signatures
- Detects Stealc stealer Version 2 14 IoCs
- Stealc
Stealc is an infostealer written in C++.
- Stealc family
Processes
-
C:\Users\Admin\AppData\Local\Temp\Setup.exe"C:\Users\Admin\AppData\Local\Temp\Setup.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4684-10-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-12-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-13-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-11-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-9-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-8-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-7-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-6-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-5-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-4-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-3-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-1-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-0-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/4684-2-0x0000000140000000-0x00000001400D3000-memory.dmp