General
Target
Size
Sample
1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128.bin
352KB
220610-pp53tsfdf7
Score
10/10
MD5
SHA1
SHA256
SHA512
5a7a90ceb6e7137c753d8de226fc7947
204a603c409e559b65c35208200a169a232da94c
1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128
a1f8dcf279b0f0b74d4e7890f118bbf27d0c20da75ebb670c0ee41dae6e16eae86c05fea5a6b51756b93360b8965545c3bde76b2beefeebed44a19fa42af79ed
Malware Config
Targets
Target
MD5
Filesize
1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128.bin
5a7a90ceb6e7137c753d8de226fc7947
352KB
Score
10/10
SHA1
SHA256
SHA512
204a603c409e559b65c35208200a169a232da94c
1e9fc7f32bd5522dd0222932eb9f1d8bd0a2e132c7b46cfcc622ad97831e6128
a1f8dcf279b0f0b74d4e7890f118bbf27d0c20da75ebb670c0ee41dae6e16eae86c05fea5a6b51756b93360b8965545c3bde76b2beefeebed44a19fa42af79ed
Tags
Signatures
-
Detect WinDealer information stealer
-
WinDealer
Description
WinDealer is an info stealer used by LuoYu group.
Tags
-
suricata: ET MALWARE Win32/WinDealer CnC Activity (Checkin)
Description
suricata: ET MALWARE Win32/WinDealer CnC Activity (Checkin)
Tags
-
Looks up external IP address via web service
Description
Uses a legitimate IP lookup service to find the infected system's external IP.
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks
static1
Score
N/A
behavioral1
Score
10/10
behavioral2
Score
10/10