General

  • Target

    5c737e8e5e7cedf0c061e62f4fb7cc2fdf06ce0e79877cc0a6563395fd37ce57.exe

  • Size

    4.5MB

  • MD5

    b4afb9c03b3b53e32b5222ac854ee294

  • SHA1

    21c7b7dd3b6e7d660d0fddabd991aab953086bcf

  • SHA256

    25a71650ac89b1b9bb43a8b879243688df40b95ab5a47b6676d818fe471695c3

  • SHA512

    3490b7d4c4bc1f43a627d30c1d44ecde74796d318051894fc58b242c096482c5a41f26ceb8431ed3fdc22e9ca97280fb91525f2ea539b5971c4daeb22bcd7ad2

  • SSDEEP

    49152:hsGmsgSVDZUQbS9BtvbfnMrUp0u7Ho2DsCZpqzTF1Qt1v6WjSJw4xSeUfE7r001U:jm3SxZlrU7G+yav6mSJw4xSeUfE7Gr

Score
10/10

Malware Config

Extracted

Family

easystealer

C2

185.106.93.137

Signatures

  • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
  • Detects Easy Stealer 1 IoCs
  • Easystealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5c737e8e5e7cedf0c061e62f4fb7cc2fdf06ce0e79877cc0a6563395fd37ce57.exe
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections