General

  • Target

    B491DCDDEB999D3AC94BAFD4352B7CBC.exe

  • Size

    152KB

  • MD5

    b491dcddeb999d3ac94bafd4352b7cbc

  • SHA1

    c5130b719b4f83f2a943916eabf75a8a407da98f

  • SHA256

    892efb3bcc8ff067719c31f96d5a8991651dd27f1607cd490a51db7946dcef8d

  • SHA512

    3a66fd357119053a11079d8eebd5e11703e729f94068727e640399370ad6e88b4f4602c29b6d45f7cfb3b78d70a97c425835882a27220559c79b086220e0b061

  • SSDEEP

    3072:tPFSlG8SHgpJSG61doHN4NgQaUukOkzybzWhKfceQwpurK:tP2ZryZoIg5vkOkOnWXmu2

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://89.105.201.33

Attributes
  • url_path

    /4d4d3a49ccbc77eb.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • B491DCDDEB999D3AC94BAFD4352B7CBC.exe
    .exe windows:5 windows x86 arch:x86

    1ef0d6e4c3554a91026b47d9a27bf6db


    Headers

    Imports

    Sections