Overview

overview

10

Static

static

10

892efb3bcc...8d.exe

windows7-x64

10

892efb3bcc...8d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    120a2bf524018bd8baa76f2b56b98889548c6ce56204503f41496d752a004730

  • Size

    73KB

  • MD5

    e20b41a48800771341c5210378dcd8cb

  • SHA1

    39c660f4905719811b7ef08e5cbcb798f8c0763b

  • SHA256

    120a2bf524018bd8baa76f2b56b98889548c6ce56204503f41496d752a004730

  • SHA512

    c84117a38cab99c0282d0944bbc5dd3442dd8a141b8fd07b51c37a410b93619a5ba28306da77320a77d36516edb769fd979c6de8823071a68f80cf479f82e611

  • SSDEEP

    1536:av5GfSaPNBJqnfl4Zde+WlJwW2AWxtijZ7a86iO1R2FG8qn6dnX7h+Nh:P6aPNBJqnfl4Z0/87AWtyRaJiO149XoX

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://89.105.201.33

Attributes
  • url_path

    /4d4d3a49ccbc77eb.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 120a2bf524018bd8baa76f2b56b98889548c6ce56204503f41496d752a004730
    .zip

    Password: infected

  • 892efb3bcc8ff067719c31f96d5a8991651dd27f1607cd490a51db7946dcef8d.exe
    .exe windows:5 windows x86 arch:x86

    1ef0d6e4c3554a91026b47d9a27bf6db


    Headers

    Imports

    Sections