Overview

overview

10

Static

static

bf00a990eb...1b.exe

windows7-x64

10

bf00a990eb...1b.exe

windows10-2004-x64

10

Resubmissions

25/12/2022, 15:09

221225-sjk29aeg6z10

22/11/2022, 09:47

221122-lr6wcshc3410

Sharing

Copy URL Twitter E-mail

General

  • Target
    bf00a990eb93a4696f6b5d6029d654ce3e2959b14db849c6630c17256c7aa31b
  • Size 871KB
  • Sample221122-lr6wcshc34
  • SHA256 bf00a990eb93a4696f6b5d6029d654ce3e2959b14db849c6630c17256c7aa31b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
allcomestealer

Malware Config

Extracted

Family

  • allcome

C2

  • http://dba692117be7b6d3480fe5220fdd58b38bf.xyz/API/2/configure.php?cf6zrlhn=finarnw

Targets

    • Target
      bf00a990eb93a4696f6b5d6029d654ce3e2959b14db849c6630c17256c7aa31b
    • Size 871KB
    • SHA256 bf00a990eb93a4696f6b5d6029d654ce3e2959b14db849c6630c17256c7aa31b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    allcomestealer

    • Allcome

      A clipbanker that supports stealing different cryptocurrency wallets and payment forms.

      stealerallcome

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks