Analysis
- user interaction
yes - max time kernel
38s - max time network
4s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
09/08/2026, 08:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
stellaware cracked by kae034444.exe
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target stellaware cracked by kae034444.exe
- Size 965KB
- Sample260809-jvycaatdkh
- SHA256 828840ed3e9d2f79b246b7e3feb32ac08bf14749c670347147fec1cb4135076e
- MD5 b00eea17120053c89c2ce83381e09ea2
- SHA1 7388a297fd3fb74ab436750e09510ab7114829f7
- SHA512 cade4b9ed8b619d5507cc9b22570f04e0add4bccd372a8a70e3e1c6aa622945d65a219ab82c9464e7bf7c504c182ee9fc3543e7c8dae0ebd6f633722cf279e8d
- SSDEEP 24576:Fbw0aPHiYPCZ2GHof3k0GZJfsxwMNXiwYMijnhSbL:S0a/sof3dbywYpjnE
- TLSH T1C625BF1AA2A401FCD0B6D0F8DA97A917E6323889033059CF17E059562F67BF46B7FB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 discord.com 2 discord.com - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5100 stellaware cracked by kae034444.exe 5100 stellaware cracked by kae034444.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5100 stellaware cracked by kae034444.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Public\StellaWare\presence\fc8010791f5797f84286f2be3d8f4623.json
- Size 89B
- SHA256 73d23c8f16a78eb97b15078a5379c1d7723413a88968e92b5a197796631cba37
- MD5 b01921f6c5d2e851ed5f4bb1266d5478
- SHA1 ca543745b263eb91df318522fd8ca37ba8776346
- SHA512 aa8860c811ff529e494095d880876b8fb5dac18a6aa2eacd4f688d9f3929beef1f5d7a75d5f147a1761bf8ac43feec0f1dc74530cacf8bd39957025d21f2b496
- TLSH T1FFB012C8B160187069C4981110AA09C29A200201F4599945927E174C00147004321610
- MD5 SHA1 SHA512 TLSH