Overview

overview

10

Static

static

10

956a768208...92.exe

windows7-x64

10

956a768208...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    956a768208ff48981465018d86d3c592

  • Size

    15KB

  • Sample

    240206-zf2ddsffe3

  • MD5

    956a768208ff48981465018d86d3c592

  • SHA1

    a4ec75f3ae2ab4c5880faefcd3b7c78bb906aa2f

  • SHA256

    8d9f9bd5bfebfd5ca156a898cc21240d767aea11c8943d34760b05bdff586387

  • SHA512

    9f69e1eeed79687e14ca674ff2dc7d82e08648e6e726ad3779fc9f0d576ba4bb4eec05803f3fe377b5e71705178aa5c191430ff56239f60499ddda88eeb33656

  • SSDEEP

    192:IGVSJrJf+Bm72P4WOnefWRjyShQSPDSFa/rtKI89Wo7rFysFMIT:pYdh+BeSON2ShQSPDSUzth8957rFviI

Score
10/10
growtopiastealer

Malware Config

Extracted

Family

growtopia

C2

https://discord.com/api/webhooks/874247640320204820/3B1X1K91RjBXiE1hDnhrKls4Ih9fE6Ge_n0uYQTa2cOY8SZ1MifX9KsVxzk4U4MVBNnJ

Attributes
  • payload_url

    https://cdn.discordapp.com/attachments/858108963778199552/872458910047559681/savedecoder.exe

Targets

    • Target

      956a768208ff48981465018d86d3c592

    • Size

      15KB

    • MD5

      956a768208ff48981465018d86d3c592

    • SHA1

      a4ec75f3ae2ab4c5880faefcd3b7c78bb906aa2f

    • SHA256

      8d9f9bd5bfebfd5ca156a898cc21240d767aea11c8943d34760b05bdff586387

    • SHA512

      9f69e1eeed79687e14ca674ff2dc7d82e08648e6e726ad3779fc9f0d576ba4bb4eec05803f3fe377b5e71705178aa5c191430ff56239f60499ddda88eeb33656

    • SSDEEP

      192:IGVSJrJf+Bm72P4WOnefWRjyShQSPDSFa/rtKI89Wo7rFysFMIT:pYdh+BeSON2ShQSPDSUzth8957rFviI

    Score
    10/10
    growtopiastealer

    • Growtopia

      Growtopa is an opensource modular stealer written in C#.

      stealergrowtopia
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks