General
-
Target
3357368c0de34a4cef5c6d90e92b5876586f302f7b9255c00d7009e64c51dc87exe_JC.exe
-
Size
297KB
-
Sample
230803-s8hy7afb9t
-
MD5
8bbd52465d743855b7194d0de0795392
-
SHA1
28917a114061b758fc188e3cdf4b52a7d44cd0e2
-
SHA256
3357368c0de34a4cef5c6d90e92b5876586f302f7b9255c00d7009e64c51dc87
-
SHA512
b0b3519513aca2d759cbf521296de64506cfadc756d3f00991771b4a080ccc352e31c526110e6235736fe5fe94ae9cceaa69352402a4280f7aa6bae837794cc6
-
SSDEEP
3072:RRFz7kt1bA5f0KfaHbxvwyYZKaEhqsoYAgKLkdscoIJjkK:vFXG1bksqmpw2TqTYlKLLco
Static task
static1
Behavioral task
behavioral1
Sample
3357368c0de34a4cef5c6d90e92b5876586f302f7b9255c00d7009e64c51dc87exe_JC.exe
Resource
win7-20230712-en
Malware Config
Extracted
stealc
http://adriaenclaeys.top/e9c345fc99a4e67e.php
Targets
-
-
Target
3357368c0de34a4cef5c6d90e92b5876586f302f7b9255c00d7009e64c51dc87exe_JC.exe
-
Size
297KB
-
MD5
8bbd52465d743855b7194d0de0795392
-
SHA1
28917a114061b758fc188e3cdf4b52a7d44cd0e2
-
SHA256
3357368c0de34a4cef5c6d90e92b5876586f302f7b9255c00d7009e64c51dc87
-
SHA512
b0b3519513aca2d759cbf521296de64506cfadc756d3f00991771b4a080ccc352e31c526110e6235736fe5fe94ae9cceaa69352402a4280f7aa6bae837794cc6
-
SSDEEP
3072:RRFz7kt1bA5f0KfaHbxvwyYZKaEhqsoYAgKLkdscoIJjkK:vFXG1bksqmpw2TqTYlKLLco
-
Downloads MZ/PE file
-
Deletes itself
-
Loads dropped DLL
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-