Static task
static1
Behavioral task
behavioral1
Sample
29a0c406ebb7c753ef3ef13fd29bdd993d0d3217215b20d4f743c01b7e383ca6.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
29a0c406ebb7c753ef3ef13fd29bdd993d0d3217215b20d4f743c01b7e383ca6.exe
Resource
win10v2004-20220414-en
General
-
Target
29a0c406ebb7c753ef3ef13fd29bdd993d0d3217215b20d4f743c01b7e383ca6
-
Size
6.7MB
-
MD5
9984a42cd368b12454aa4d38000e494a
-
SHA1
3b0a2a47fad37321ae4adc14bbd241c1f35694b9
-
SHA256
29a0c406ebb7c753ef3ef13fd29bdd993d0d3217215b20d4f743c01b7e383ca6
-
SHA512
cb3fd18b3173179d56a37b8d6674a871fca16a703fc1ecba541c564055021d49ab6e8f1568f082a8960ad6fa299065105ff19d532ace9b6543543b669e04088f
-
SSDEEP
49152:a+wRhBRT36cXL9kUpTb1f8T8+eZBJH6mNxLFQitUZDSw8xvP7tZwl6rSNdsj6KtE:gRHRTR9DzgeZ/Nx/tvP7D66WkQaPIX
Malware Config
Signatures
-
StealthWorker Payload 1 IoCs
Processes:
resource yara_rule sample stealthworker -
Stealthworker family
Files
-
29a0c406ebb7c753ef3ef13fd29bdd993d0d3217215b20d4f743c01b7e383ca6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 198KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ