Static task
static1
Behavioral task
behavioral1
Sample
e6e3a37f053bd43bb78e7c8d9c5ad26c71aab6e91f7df1005ee8ffaddaade14a.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
e6e3a37f053bd43bb78e7c8d9c5ad26c71aab6e91f7df1005ee8ffaddaade14a.exe
Resource
win10v2004-20220414-en
General
-
Target
e6e3a37f053bd43bb78e7c8d9c5ad26c71aab6e91f7df1005ee8ffaddaade14a
-
Size
4.1MB
-
MD5
e1c69be0f36873212cd0a5f29bd2edfa
-
SHA1
48f7501444cb07628ef73200d0677a4fecb962d4
-
SHA256
e6e3a37f053bd43bb78e7c8d9c5ad26c71aab6e91f7df1005ee8ffaddaade14a
-
SHA512
9847d3b594cbe00ad70037a35cbc8fd6ef8e4c9bc2aedf925ba22737f723a8f4ec4244ed4f583cd0eb783d9c42c89dee062206fca080ffbb359dff98818d5e7d
-
SSDEEP
49152:6EnHCvW5a057ptprqHpn48rlEFZjq+F4d3W4HGZ7yiCRrEh08Z61UlMX:rivWn57rZaLruf/mVW4H4mtX
Malware Config
Signatures
-
StealthWorker Payload 1 IoCs
Processes:
resource yara_rule sample stealthworker -
Stealthworker family
Files
-
e6e3a37f053bd43bb78e7c8d9c5ad26c71aab6e91f7df1005ee8ffaddaade14a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 189KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ