Overview

overview

10

Static

static

10

956f3fe2d9...c9.exe

windows7-x64

10

956f3fe2d9...c9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd08c482c1a4d1598773a17dbf56de0694ced6974c66c15ec4e7066d6c0acc33

  • Size

    73KB

  • MD5

    c514ef98b08db6354d3ad79da30152a9

  • SHA1

    a78fcf60f81f3df5d53956a66bbad617bff4bb2b

  • SHA256

    fd08c482c1a4d1598773a17dbf56de0694ced6974c66c15ec4e7066d6c0acc33

  • SHA512

    56abe52e214a7f9a65c38866cd26026e41e28c22207f47e6eee19b82fc5332a8073bde6034323bc9060a1174e5cc3cbaaa93d98403e8b3dbdd5b72d4291b0d93

  • SSDEEP

    1536:q0YQBw18HfHluetg6NFCtxorCvAKM9v8e0s3UMks1l/utgSQgdS0H32tA:9M1YfHMD6NFCtxgCvAKIv50OUOlEYgb

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://185.216.70.109

Attributes
  • url_path

    /eb488f9cb9d466ca.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fd08c482c1a4d1598773a17dbf56de0694ced6974c66c15ec4e7066d6c0acc33
    .zip

    Password: infected

  • 956f3fe2d9989f0269cd72c70c00468a6f6dea368871a9745ba3836ec3a162c9.exe
    .exe windows:5 windows x86 arch:x86

    1ef0d6e4c3554a91026b47d9a27bf6db


    Headers

    Imports

    Sections