Analysis
- user interaction
yes - max time kernel
149s - max time network
95s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
- submitted
16/04/2026, 02:52
General
- Target FL.Studio.v25.1.6.49971_installer.exe
- Size 125.1MB
- Sample260416-dc2dbsew5m
- SHA256 5723c0bb378e1988b7cd973bda886cd04d4666f74539478fae078a13950b0da1
Malware Config
Extracted
-
stealc
-
prime
-
http://193.111.117.51
-
url_path
/94a5dbd165044e85b88e.php
Signatures
- Family: Stealc
Stealc is an infostealer written in C++.
- Detects Stealc stealer Version 2 14 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FL.Studio.v25.1.6.49971_installer.exe"C:\Users\Admin\AppData\Local\Temp\FL.Studio.v25.1.6.49971_installer.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2192-9-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-15-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-19-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-18-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-17-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-16-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-14-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-13-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-12-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-11-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-10-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-8-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-0-0x0000000140000000-0x00000001400D3000-memory.dmp
memory/2192-20-0x0000000140000000-0x00000001400D3000-memory.dmp