General

  • Target

    NEAS.1edb8aa1adacda31bc98064b1634ddeabin_JC.zip

  • Size

    156KB

  • MD5

    138370815c888c4362068622ba4d3e5a

  • SHA1

    457c66bc68fcc429c0218399fb1b40a446b5daa7

  • SHA256

    372950be624691f21ea31e846fda46915ae437dc596fd43e7adce57d12acfde5

  • SHA512

    17c90595978c58197091ff97181699c597597f861e050f1ccd84ef89b3e547b4813137fcaf8b806e4167044455f4123ef3949637da26acc035ba8378bc43abee

  • SSDEEP

    3072:l8pSsqL+E/5hqnffddeUbQ7x9sK/7UYjEzCSM22YBwpmmgR722BGXOXhqLVe:lOZqLnxhqnCU07PsK/gY4CYOpzCC2BGY

Score
10/10

Malware Config

Signatures

  • Detect Gurcu Stealer V3 payload 1 IoCs
  • Gurcu family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.1edb8aa1adacda31bc98064b1634ddeabin_JC.zip
    .zip

    Password: infected

  • fb33ecb0d51761b0bde6977c7ae7eec18fd4c326bd73f3f4fac32e9abfb18575.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections