Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/07/2026, 22:49

General

  • Target
    35bf79617f36d5cb175cbb7c80f4d951cbc28939e101eba97571caa31ed1257c.exe
  • Size 1.5MB
  • Sample260722-2r2jmsdb33
  • SHA256 35bf79617f36d5cb175cbb7c80f4d951cbc28939e101eba97571caa31ed1257c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: WallStealer

    WallStealer is an information stealer.

  • Detects WallStealer stealer 15 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\35bf79617f36d5cb175cbb7c80f4d951cbc28939e101eba97571caa31ed1257c.exe
    "C:\Users\Admin\AppData\Local\Temp\35bf79617f36d5cb175cbb7c80f4d951cbc28939e101eba97571caa31ed1257c.exe"
    1⤵
      PID:2348

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          fudcrypt_stub.log

          • Path C:\Users\Admin\AppData\Local\Temp\fudcrypt_stub.log
          • Size 128B
          • SHA256 f53444ab9267d4a58f8d9da0292d14fb92bcccc2107fedcf5b4e33fcf32cce1a
          • MD5 SHA1 SHA512 TLSH

          memory/2348-12-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-21-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-23-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-22-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-20-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-26-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-25-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-28-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-29-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-31-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-33-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-32-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-30-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-27-0x000002B829330000-0x000002B82A6AC000-memory.dmp

          memory/2348-24-0x000002B829330000-0x000002B82A6AC000-memory.dmp