Overview

overview

10

Static

static

10

a001a71205...78.exe

windows7-x64

10

a001a71205...78.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    143797eba04af67ba729b2eb67f824a8.bin

  • Size

    73KB

  • MD5

    681aea2a6d748cc9cc1a4b3d929b9505

  • SHA1

    2c9c36b704906efa1a85f5c731f4da74e405c006

  • SHA256

    f5a4cc8fc96e2e51a8770d9bbd42695ccb5eec2b31d18b93e2e22b944fff55d0

  • SHA512

    1360748ea919359a017537bcae0194215020fdaff24cc1b5384b8ad37a3201ecbbce2f2ce4dd88dd5fa7b90bc656358b27da42a12282f4ce5acce985da33b16c

  • SSDEEP

    1536:dWQMX8oH1zHJizR9DUtOYU8pHOZku4RnU8CQv1EwLSHRX:NezQd6cZgRy61EwLSh

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://193.163.7.20

Attributes
  • url_path

    /edf04ce5e57d0f66.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 143797eba04af67ba729b2eb67f824a8.bin
    .zip

    Password: infected

  • a001a71205b22e3bb39a9e586bb587b95f459c04eb1ef43d08e4420d1760b878.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    1ef0d6e4c3554a91026b47d9a27bf6db


    Headers

    Imports

    Sections