Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
20/04/2026, 22:55
Behavioral task
behavioral1
Sample
d34e20740a20eabfda62d108ca73952de194832d28f66ad32cab815405ae777a_aa7ea486-719a-48ba-9d94-a119b657dcd9.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d34e20740a20eabfda62d108ca73952de194832d28f66ad32cab815405ae777a_aa7ea486-719a-48ba-9d94-a119b657dcd9.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target d34e20740a20eabfda62d108ca73952de194832d28f66ad32cab815405ae777a_aa7ea486-719a-48ba-9d94-a119b657dcd9.exe
- Size 2.4MB
- Sample260420-2wlc8aez4m
- SHA256 d34e20740a20eabfda62d108ca73952de194832d28f66ad32cab815405ae777a
- MD5 76ae96421b0e6d38dd4f1050bea83694
- SHA1 b1194ed96af58e91d1db190ba21869335cf1cf21
- SHA512 ac35e981fe3d9fe2137a1ccc2c39de504ba5d76e5859753a154fa234757f5c6ad07c64d64843d1706c48a2312e9d1ec5af7bcaa6b5eac4bb0ca8880c6a00b702
- SSDEEP 49152:sg8RM6cOVZmnn49o6GzEXBX8+QivqASwaPb96OFYPTsVhPEd8GO6RAkH7q6AxquB:l82mlthOHLwa
- TLSH T12CC55A2B55A9609AE3E7C07CF1165752FC3176491E39A3BB14B683923730A2C9B7C372
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Signatures
- Family: DeerStealer
DeerStealer is a sophisticated information stealer written in C++.
- Detects DeerStealer 2 IoCs
resource yara_rule behavioral2/memory/3440-0-0x00007FF65F400000-0x00007FF65F70A000-memory.dmp family_deerstealer behavioral2/memory/3440-2-0x00007FF65F400000-0x00007FF65F70A000-memory.dmp family_deerstealer
Processes
-
C:\Users\Admin\AppData\Local\Temp\d34e20740a20eabfda62d108ca73952de194832d28f66ad32cab815405ae777a_aa7ea486-719a-48ba-9d94-a119b657dcd9.exe"C:\Users\Admin\AppData\Local\Temp\d34e20740a20eabfda62d108ca73952de194832d28f66ad32cab815405ae777a_aa7ea486-719a-48ba-9d94-a119b657dcd9.exe"1⤵PID:3440