General

  • Target

    b7da96601373ec4c8dbe3cef31ec05b2.exe

  • Size

    102KB

  • MD5

    b7da96601373ec4c8dbe3cef31ec05b2

  • SHA1

    c81416c22b6c18c040fc54ef6972a28efcf8bd82

  • SHA256

    93284d5b4f436b716386268d24c41971dd24c01a1fc1dacab90c19002076ed0b

  • SHA512

    2ba4b3657618724bf060ce4f1f4b4b7c34a905ada97219ccdc8bec62c668f47fe12d28d939842e80309a084127403e4480d9df6562355ab1717fc493a02dcafe

  • SSDEEP

    3072:OwZx7tPwbpTK8Q5Uzf4JElJvIT44UTChRq:vZ1xwbJKAzAElJA84pr

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://95.214.25.241

Attributes
  • url_path

    /29dca981ee82db8c.php

rc4.plain

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b7da96601373ec4c8dbe3cef31ec05b2.exe
    .exe windows:5 windows x86

    372dad7e771f409df9ab1b912548c291


    Headers

    Imports

    Sections