Overview

overview

8

Static

static

8

Sordeal-St...in.zip

windows7-x64

1

Sordeal-St...in.zip

windows10-2004-x64

1

Sordeal-St...da.yml

windows7-x64

3

Sordeal-St...da.yml

windows10-2004-x64

3

Sordeal-St...DME.md

windows7-x64

3

Sordeal-St...DME.md

windows10-2004-x64

3

Sordeal-St...ut.png

windows7-x64

3

Sordeal-St...ut.png

windows10-2004-x64

3

Sordeal-St...ld.png

windows7-x64

3

Sordeal-St...ld.png

windows10-2004-x64

3

Sordeal-St...to.png

windows7-x64

3

Sordeal-St...to.png

windows10-2004-x64

3

Sordeal-St...es.png

windows7-x64

3

Sordeal-St...es.png

windows10-2004-x64

3

Sordeal-St...ns.png

windows7-x64

3

Sordeal-St...ns.png

windows10-2004-x64

3

Sordeal-St...ut.png

windows7-x64

3

Sordeal-St...ut.png

windows10-2004-x64

3

Sordeal-St...ld.png

windows7-x64

3

Sordeal-St...ld.png

windows10-2004-x64

3

Sordeal-St...to.png

windows7-x64

3

Sordeal-St...to.png

windows10-2004-x64

3

Sordeal-St...es.png

windows7-x64

3

Sordeal-St...es.png

windows10-2004-x64

3

Sordeal-St...ns.png

windows7-x64

3

Sordeal-St...ns.png

windows10-2004-x64

3

Sordeal-St...go.ico

windows7-x64

3

Sordeal-St...go.ico

windows10-2004-x64

3

Sordeal-St...go.png

windows7-x64

3

Sordeal-St...go.png

windows10-2004-x64

3

Sordeal-St...al.ico

windows7-x64

3

Sordeal-St...al.ico

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    Sordeal-Stealer-main.zip

  • Size

    930KB

  • MD5

    5b6372aaf783df843deea70d4d2ee115

  • SHA1

    01febedd0e521a519014e85a1216729bf041a803

  • SHA256

    15e466870da0c8ab06d1b9d5353ee6c9330be0382fc154493f9d9b58901d4579

  • SHA512

    1ca06526d61d3f508c24f7589bc3f9183485b2c5ca697428e4b30ca6b6244d21c62f76c394e52de454fdea8f2fa89e116689bae4f2ea9b9f4a839323be88c685

  • SSDEEP

    12288:jtdxjLtMJME4dSJrEjT8lzyA4+fqy1XaM8K9G80iPAi52M7zIDBrqAItEGN61HJr:5HOPC75ObfvTbkrqAItD6b6D8J7kyMU

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • Sordeal-Stealer-main.zip
    .zip

    Password: gg

  • Sordeal-Stealer-main/.github/workflows/python-package-conda.yml
  • Sordeal-Stealer-main/README.MD
  • Sordeal-Stealer-main/Sordeal_assets/img/d_about.png
    .png
  • Sordeal-Stealer-main/Sordeal_assets/img/d_build.png
    .png
  • Sordeal-Stealer-main/Sordeal_assets/img/d_crypto.png
    .png
  • Sordeal-Stealer-main/Sordeal_assets/img/d_files.png
    .png
  • Sordeal-Stealer-main/Sordeal_assets/img/d_options.png
    .png
  • Sordeal-Stealer-main/Sordeal_assets/img/l_about.png
    .png
  • Sordeal-Stealer-main/Sordeal_assets/img/l_build.png
    .png
  • Sordeal-Stealer-main/Sordeal_assets/img/l_crypto.png
    .png
  • Sordeal-Stealer-main/Sordeal_assets/img/l_files.png
    .png
  • Sordeal-Stealer-main/Sordeal_assets/img/l_options.png
    .png
  • Sordeal-Stealer-main/Sordeal_assets/img/logo.ico
  • Sordeal-Stealer-main/Sordeal_assets/img/logo.png
    .png
  • Sordeal-Stealer-main/Sordeal_assets/img/sordeal.ico
  • Sordeal-Stealer-main/Sordeal_assets/img/sordeal.png
    .png
  • Sordeal-Stealer-main/Sordeal_assets/upx/upx.exe
    .exe windows x64

    Password: gg


    Headers

    Sections

  • out.upx
    .exe windows x64


    Headers

    Sections

  • Sordeal-Stealer-main/builder.py
  • Sordeal-Stealer-main/install.bat
  • Sordeal-Stealer-main/main.py
  • Sordeal-Stealer-main/obfuscation.py
  • Sordeal-Stealer-main/requirements.txt
  • Sordeal-Stealer-main/start.bat