Analysis
- max time kernel
148s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 13:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Firstrunner.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
General
- Target Firstrunner.exe
- Size 1.2MB
- Sample260925-q79peatvex
- SHA256 61aeb827251d692cb38c99cd8627ed501f8f89642322c596222cca63652ed26f
- MD5 01214ae7815f86f8652090c162996a68
- SHA1 3d02fa417050493591d6ca20e9cdff298a5bbbb2
- SHA512 fb0bfc33b01cf92c872354232ced9bd7c2e29fe5a06b9dfb50013610345c47099172069c2bd33ae9b6485ff67289b556186abfca6d456abbade113b8a0745433
- SSDEEP 24576:5p3XsPR0eubF/9dOf164fCgkMcYmwqnnvjiEt:520RGflPcBwqnLi
- TLSH T102457E9DF6735080C0C622F69345973AD8BCBAC2458156EB0E991F36FC8BC6BDD452B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
stealc
C2
-
http://31.56.19.29
rc4.plain
Signatures
- Detects Stealc stealer Version 3 14 IoCs
resource yara_rule behavioral2/memory/4648-6-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-3-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-18-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-15-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-12-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-11-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-9-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-17-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-16-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-14-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-13-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-10-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-8-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3 behavioral2/memory/4648-7-0x0000000140000000-0x00000001400B6000-memory.dmp family_stealc_v3