windealer | ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4 | Triage

Submit
Reports

Overview

overview

Static

static

ea4561607c...a4.exe

windows7-x64

ea4561607c...a4.exe

windows10-2004-x64

Sharing

General

Target

ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4
Size

444KB
Sample

221122-qjqxdsdg69
MD5

73695fc3868f541995b3d1cc4dfc1350
SHA1

158c7382c88e10ab0208c9a3c72d5f579b614947
SHA256

ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4
SHA512

e662c2cfa651f8b080c8c0b6650a60565ba3d93130ce7c68a927454e5bef11400b495de5512bcc62d530c9243a450c9c2252f789c5b2911b2913ea163502dbfc
SSDEEP

6144:FAv4cqcUtBUmm60Lo6Dje6lNPPvKspCgOU7ApITDs4aiIjT+WhB:yrqhtBUmm6bQe6f/Ks4gj7AVuO

Score

10^/10

windealer stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4.exe

Resource

win7-20220901-en

windealer stealer trojan

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4.exe

Resource

win10v2004-20220901-en

windealer stealer trojan

windows10-2004-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  
  ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4
- Size
  
  444KB
- MD5
  
  73695fc3868f541995b3d1cc4dfc1350
- SHA1
  
  158c7382c88e10ab0208c9a3c72d5f579b614947
- SHA256
  
  ea4561607c00687ea82b3365de26959f1adb98b6a9ba64fa6d47a6c19f22daa4
- SHA512
  
  e662c2cfa651f8b080c8c0b6650a60565ba3d93130ce7c68a927454e5bef11400b495de5512bcc62d530c9243a450c9c2252f789c5b2911b2913ea163502dbfc
- SSDEEP
  
  6144:FAv4cqcUtBUmm60Lo6Dje6lNPPvKspCgOU7ApITDs4aiIjT+WhB:yrqhtBUmm6bQe6f/Ks4gj7AVuO
Score

10^/10

windealer stealer trojan
- Detect WinDealer information stealer
  stealer
- WinDealer
  WinDealer is an info stealer used by LuoYu group.
  stealer trojan windealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

windealerstealertrojan

behavioral2

windealerstealertrojan

© 2018-2024

Terms | Privacy