General

  • Target

    aec7f85618c3d302d3b415e11c3622f2a8a6337b237b458c064c31418724976d

  • Size

    86KB

  • MD5

    ccb07e7f4a3676745a5e0bba3c8d1843

  • SHA1

    1ee7d1d913fd6bfb051ad9edf62b8346ebe41645

  • SHA256

    aec7f85618c3d302d3b415e11c3622f2a8a6337b237b458c064c31418724976d

  • SHA512

    32bd7f348c22bf83b43032296314d3ec85a8828c3543d9c82571bf1c7bc6c3b2066a833085a62e179a071fd8eb9e78b9b517934751875e9f6c98a60433eb467a

  • SSDEEP

    1536:qznVl9TiwTAR/gjHDrmNCZ/GDO4bOe13KKUdnlKWDhimzj32PEG6x:cnV6YAR/gjjGue13KNPhi1PEn

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://193.163.7.160

Attributes
  • url_path

    /f95721327cee196f.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aec7f85618c3d302d3b415e11c3622f2a8a6337b237b458c064c31418724976d
    .zip

    Password: infected

  • 225cbc74f957f8831349771de0a88e15bc458090166276d08bad6d304fb7c257.exe
    .exe windows:5 windows x86 arch:x86

    6bd84bdd266cf6186651348d6be7d442


    Headers

    Imports

    Sections