General
- Target 04846099.exe
- Size 282KB
- Sample230526-peatyafd53
- SHA256 7054b6754aedc7bd4f95deeaea4bf8be7835ccbd34e777bb9676f1a2e1383090
- MD5 30d5ddec9c4ac25fb2f49d50a770cd70
- SHA1 a203167ff9298d4f9134a194513731d1d52a9337
- SHA512 3e1636bf5f325f2beda9482b1d92b540c184981aec19f13ef17d1b18c69f46fe9e73e532ec96f413cd62c6547c1a594f8e44268abecd2222ae593d6cfed27976
- SSDEEP 3072:90noy9azdj137iubUxL/Ntly3P4ELBaq5mCbrCa5Fp54PgWdKTjOQXV:ComahF7E7S40Baq5wrPgW0TV
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
04846099.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
C2
-
http://ronaldlitt.top/25d4fc7fb0cb6b78.php
Targets
-
- Target 04846099.exe
- Size 282KB
- SHA256 7054b6754aedc7bd4f95deeaea4bf8be7835ccbd34e777bb9676f1a2e1383090
- MD5 30d5ddec9c4ac25fb2f49d50a770cd70
- SHA1 a203167ff9298d4f9134a194513731d1d52a9337
- SHA512 3e1636bf5f325f2beda9482b1d92b540c184981aec19f13ef17d1b18c69f46fe9e73e532ec96f413cd62c6547c1a594f8e44268abecd2222ae593d6cfed27976
- SSDEEP 3072:90noy9azdj137iubUxL/Ntly3P4ELBaq5mCbrCa5Fp54PgWdKTjOQXV:ComahF7E7S40Baq5wrPgW0TV
- MD5 SHA1 SHA512 SSDEEP
-
Detects Stealc stealer
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.