Overview

overview

10

Static

static

10

956f3fe2d9...c9.exe

windows7-x64

10

956f3fe2d9...c9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ce2773c6e58dbd101789d17121c9d26d3c718a53ca3f2cb4e9947d7a4fea8841

  • Size

    73KB

  • MD5

    cbe1f021ab6ce75e35d06eaa697b241a

  • SHA1

    c0b0b45551e030046b1eb419a1d1b7e9053b4e17

  • SHA256

    ce2773c6e58dbd101789d17121c9d26d3c718a53ca3f2cb4e9947d7a4fea8841

  • SHA512

    a30994e061236259af3d66fba7d795dc616bab16da48efe683a6443af0529d34a207de9095de0cbb854d9ac2deb093efdbcc636e5e6ac48b05bebf07d190643d

  • SSDEEP

    1536:NsTxeCMuSlYLcORD2H0bhhnY47H9oo3o4D/+AtBH4YOx1A:cxenlvOwH0bhVY47dnoA+bxG

Score
10/10
stealc

Malware Config

Extracted

Family

stealc

C2

http://185.216.70.109

Attributes
  • url_path

    /eb488f9cb9d466ca.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ce2773c6e58dbd101789d17121c9d26d3c718a53ca3f2cb4e9947d7a4fea8841
    .zip

    Password: infected

  • 956f3fe2d9989f0269cd72c70c00468a6f6dea368871a9745ba3836ec3a162c9.exe
    .exe windows:5 windows x86 arch:x86

    1ef0d6e4c3554a91026b47d9a27bf6db


    Headers

    Imports

    Sections