General
- Target file.exe
- Size 270KB
- Sample231205-rlpb1sbe2t
- SHA256 9e50ebda71a858637fa3ea9ae5a1d9efcceba645ae1f3bb1c14bec6c8c82bd1b
- MD5 b4e76dc34321b874ab2fec7a3879fb1c
- SHA1 ce6fce0c399c7ebf4c0a5c7e26fae40c135b3cfd
- SHA512 983678b3152498845982edfe6843027f0c7bd1ff29afd12e2e145e909680ba69b22e1b8a39812b4b8cb4317bcb2dfc6ee81ed060c402f990ed1b135ee6e6ddb8
- SSDEEP 3072:XwcA0rPo6/8XI5fvtW9gmmRo/hNOx9PzOxjXJeXxN8xd/jt2d:AcZ0145flWqFovOxdkzJehNo1j
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20231129-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
C2
-
http://5.42.64.41
Attributes
-
url_path
/40d570f44e84a454.php
rc4.plain
Targets
-
- Target file.exe
- Size 270KB
- SHA256 9e50ebda71a858637fa3ea9ae5a1d9efcceba645ae1f3bb1c14bec6c8c82bd1b
- MD5 b4e76dc34321b874ab2fec7a3879fb1c
- SHA1 ce6fce0c399c7ebf4c0a5c7e26fae40c135b3cfd
- SHA512 983678b3152498845982edfe6843027f0c7bd1ff29afd12e2e145e909680ba69b22e1b8a39812b4b8cb4317bcb2dfc6ee81ed060c402f990ed1b135ee6e6ddb8
- SSDEEP 3072:XwcA0rPo6/8XI5fvtW9gmmRo/hNOx9PzOxjXJeXxN8xd/jt2d:AcZ0145flWqFovOxdkzJehNo1j
- MD5 SHA1 SHA512 SSDEEP
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.