Overview

overview

10

Static

static

3

install.exe

windows7-x64

10

install.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    install.exe

  • Size

    7.3MB

  • Sample

    230726-rabxjscd63

  • MD5

    7d26dce6ba89dedbd27455167f0a3044

  • SHA1

    19e3b77457a387ab5089b276056af074d0f8e77a

  • SHA256

    21bd925baf84272f5e5247e89646c8451c527fb4dbc15c4ac87615329d6d92ab

  • SHA512

    a474a6cd9a9195389a631f5f7637e212fe4f89f2d848a85acfa2778c5efc4c69047196ae6d7f78254fc600ebc00e2faf9d6bfeb2ac7c43f31062d7d827077f6d

  • SSDEEP

    24576:T0zKbWffNzzG+5DnKW4YRcTCDyO+QlehV7UC7vNbMWA9qIZ/QD83qZ/gbaq/EqJO:T0mbW3NzX5rtsTCAWtKCRGz1

Score
10/10
aurorastealer

Malware Config

Extracted

Family

aurora

C2

45.15.156.210:8081

Targets

    • Target

      install.exe

    • Size

      7.3MB

    • MD5

      7d26dce6ba89dedbd27455167f0a3044

    • SHA1

      19e3b77457a387ab5089b276056af074d0f8e77a

    • SHA256

      21bd925baf84272f5e5247e89646c8451c527fb4dbc15c4ac87615329d6d92ab

    • SHA512

      a474a6cd9a9195389a631f5f7637e212fe4f89f2d848a85acfa2778c5efc4c69047196ae6d7f78254fc600ebc00e2faf9d6bfeb2ac7c43f31062d7d827077f6d

    • SSDEEP

      24576:T0zKbWffNzzG+5DnKW4YRcTCDyO+QlehV7UC7vNbMWA9qIZ/QD83qZ/gbaq/EqJO:T0mbW3NzX5rtsTCAWtKCRGz1

    Score
    10/10
    aurorastealer

    • Aurora

      Aurora is a crypto wallet stealer written in Golang.

      stealeraurora

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks