General

  • Target

    Install.exe

  • Size

    107KB

  • MD5

    111018d6a569ce6e1f2c1c56153da2af

  • SHA1

    ee1cf2ebc6b9386dee3c782fa3c17eae41b21435

  • SHA256

    931b3f72357711e8b7d94acf0ad2633b61170cfab4603ae03aa2bf7ef43831bf

  • SHA512

    901111cdb419ea4031ece1dac184e6f826e5c89f7692f1ddf7751c11d0881f7710da3eda92b31ff4dd40f34d0a6ed93a4dda35c1d7ade5417b479a4a11ec7e76

  • SSDEEP

    1536:4PxuHrsMhitNwCjxt5vXxDa3T9ZRTtTzRt4jJ83EJzLWDh4YK6iM4rSdsEJ+PDGu:ixuHLcpj5hD6T9ZLTzMG4r6BGj6/

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://5.161.203.102

Attributes
  • url_path

    /588e07e216f165bc.php

rc4.plain

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Install.exe
    .exe windows:5 windows x86 arch:x86

    7fa325ed77f9c70a74b872b64c4eedd1


    Headers

    Imports

    Sections