Overview

overview

10

Static

static

10

Sahyui1337.exe

windows7-x64

10

Sahyui1337.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Sahyui1337.exe

  • Size

    316KB

  • Sample

    240302-almprafd3y

  • MD5

    2693065c7466d53bc86bc26ab8d657ea

  • SHA1

    8ec18593214537e019cedc37267156871c57cd2c

  • SHA256

    3a506705c6e005e1a74b9449af0e7474b3a8602442e84cd6ece7f1fbc99a3929

  • SHA512

    f470bfe4cdca82de7d453d4dbeaed8de46cf1e82a9c1a9fbd7d4180158500f97311ca631e4a6c43416d999a6c9a12487c8b31a46956a1e360a8f265c173f6401

  • SSDEEP

    6144:0syU6MDdbBCydeWh53MCL7LLVmBivzU7nx5VZ2Fvd:0spP3MCL7LTG5V0vd

Score
10/10
growtopiastealer

Malware Config

Extracted

Family

growtopia

C2

https://discord.com/api/webhooks/1213276088067956746/zJW67eYDWSXdbZ0gcW2u1ph9Sy4d5Gty57RjKvf-OGTMj-ubZMU_ZFvxQE_Yec_aCK5b

Targets

    • Target

      Sahyui1337.exe

    • Size

      316KB

    • MD5

      2693065c7466d53bc86bc26ab8d657ea

    • SHA1

      8ec18593214537e019cedc37267156871c57cd2c

    • SHA256

      3a506705c6e005e1a74b9449af0e7474b3a8602442e84cd6ece7f1fbc99a3929

    • SHA512

      f470bfe4cdca82de7d453d4dbeaed8de46cf1e82a9c1a9fbd7d4180158500f97311ca631e4a6c43416d999a6c9a12487c8b31a46956a1e360a8f265c173f6401

    • SSDEEP

      6144:0syU6MDdbBCydeWh53MCL7LLVmBivzU7nx5VZ2Fvd:0spP3MCL7LTG5V0vd

    Score
    10/10
    growtopiastealer

    • Growtopia

      Growtopa is an opensource modular stealer written in C#.

      stealergrowtopia

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks