Analysis
- max time kernel
149s - max time network
158s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/04/2026, 03:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5cd4ef3d3fa33788f596b13c200d868acdedffd270337e213a6811e1a5d213a0.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5cd4ef3d3fa33788f596b13c200d868acdedffd270337e213a6811e1a5d213a0.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target 5cd4ef3d3fa33788f596b13c200d868acdedffd270337e213a6811e1a5d213a0.exe
- Size 6.3MB
- Sample260417-d1xeaahs7t
- SHA256 5cd4ef3d3fa33788f596b13c200d868acdedffd270337e213a6811e1a5d213a0
- MD5 2383374220783dcaee276fc074b3e675
- SHA1 ee31f517b7016586d1de93a28f76e81397203744
- SHA512 4b1e5101b875e14a18d1bb7ffe6539f96f58f7e4ecb65bfd9dec9206463fe34d92c0761a40d412626a8f37766fb87d1333d572a742bf21cef9a12d31b3fd482b
- SSDEEP 196608:E9GwNOXjg/InNhxjIZ9IsgK1b3UMKqcW1:EMwNOzg/InNhxjIZtgKB3P
- TLSH T1C966D016E1A901BDE4BBC13DC946552FE7B2782617B08FFF02A095691F336E15A3EB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- Family: WallStealer
WallStealer is an information stealer.
- Detects WallStealer stealer 17 IoCs
resource yara_rule behavioral2/memory/5636-4-0x0000000140001000-0x0000000142305000-memory.dmp family_wallstealer behavioral2/memory/5636-0-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-1-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-2-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-3-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-5-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-6-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-7-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-8-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-9-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-10-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-11-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-12-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-13-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-15-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-14-0x0000000140000000-0x0000000143FA2000-memory.dmp family_wallstealer behavioral2/memory/5636-16-0x0000000140001000-0x0000000142305000-memory.dmp family_wallstealer