Overview

overview

10

Static

static

3

f7b7ac48e7...8a.exe

windows7-x64

10

f7b7ac48e7...8a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7b7ac48e768ff1a16291b9055c8b98a.bin

  • Size

    4.7MB

  • Sample

    230828-ca1hksef74

  • MD5

    f7b7ac48e768ff1a16291b9055c8b98a

  • SHA1

    02e9be79f85c15866f5af5a2c2cc81ad225243a2

  • SHA256

    f5c68240b5a613533e53476cd20561e57c79d9cf664c48bdbd9380886005a2c8

  • SHA512

    8be4c6c347581726508216232a070e6be22d6c411b93ffbc0e889df23b6924e809ba1957266cfd271a531ce98f1834f05f65ce615277c797718ee11f59469a18

  • SSDEEP

    98304:1W7IypKO+6PbFmS3VjVEOeTtJaAbLECnrZXJT7i:1W3bFmS3VjVEOeTtJHbdnrz7

Score
10/10
aurorastealer

Malware Config

Extracted

Family

aurora

C2

217.195.155.154:8081

Targets

    • Target

      f7b7ac48e768ff1a16291b9055c8b98a.bin

    • Size

      4.7MB

    • MD5

      f7b7ac48e768ff1a16291b9055c8b98a

    • SHA1

      02e9be79f85c15866f5af5a2c2cc81ad225243a2

    • SHA256

      f5c68240b5a613533e53476cd20561e57c79d9cf664c48bdbd9380886005a2c8

    • SHA512

      8be4c6c347581726508216232a070e6be22d6c411b93ffbc0e889df23b6924e809ba1957266cfd271a531ce98f1834f05f65ce615277c797718ee11f59469a18

    • SSDEEP

      98304:1W7IypKO+6PbFmS3VjVEOeTtJaAbLECnrZXJT7i:1W3bFmS3VjVEOeTtJHbdnrz7

    Score
    10/10
    aurorastealer

    • Aurora

      Aurora is a crypto wallet stealer written in Golang.

      stealeraurora
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks