stealthworker | ae415920001f80c468cc6cda8ba58e98f5df63f4c00f60eeefe5e686b9bc8134

General

Target
ae415920001f80c468cc6cda8ba58e98f5df63f4c00f60eeefe5e686b9bc8134
Size 6.9MB
Sample220701-eeykwscff7
SHA256 ae415920001f80c468cc6cda8ba58e98f5df63f4c00f60eeefe5e686b9bc8134
MD5 2575a94740dd26ae430a665940284306
SHA1 16b4e251db8edbdfea1d84841cc160f8956dd37b
SHA512 47f3649ee64ad235530371fe0aac7a4dcf0bf6cf569f2a75f6167178e45ecf3469ea43748173a547ddaec6e61de8fae4495934e370bb4c4a7950f2ded33e6132
SSDEEP 49152:Zk2mic7iMnbPvRUAm+ugRkqjR7Q8TOc5KubExvCsNGEgveIXB4Iu7NT/IeswF69G:xmP7i+Rf0es5u27NTAcSE8HIX
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

StealthWorker Payload 1 IoCs

botnet

resource	yara_rule
sample	stealthworker

SHA256 ae415920001f80c468cc6cda8ba58e98f5df63f4c00f60eeefe5e686b9bc8134
MD5 2575a94740dd26ae430a665940284306
SHA1 16b4e251db8edbdfea1d84841cc160f8956dd37b
SHA512 47f3649ee64ad235530371fe0aac7a4dcf0bf6cf569f2a75f6167178e45ecf3469ea43748173a547ddaec6e61de8fae4495934e370bb4c4a7950f2ded33e6132
SSDEEP 49152:Zk2mic7iMnbPvRUAm+ugRkqjR7Q8TOc5KubExvCsNGEgveIXB4Iu7NT/IeswF69G:xmP7i+Rf0es5u27NTAcSE8HIX
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

315920

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths