Overview
overview
6Static
static
1Byte-Steal...er.bat
ubuntu-18.04-amd64
Byte-Steal...er.bat
debian-9-armhf
Byte-Steal...er.bat
debian-9-mips
Byte-Steal...er.bat
debian-9-mipsel
Byte-Steal...12.bat
ubuntu-18.04-amd64
Byte-Steal...12.bat
debian-9-armhf
Byte-Steal...12.bat
debian-9-mips
Byte-Steal...12.bat
debian-9-mipsel
Byte-Steal...es.bat
ubuntu-18.04-amd64
Byte-Steal...es.bat
debian-9-armhf
Byte-Steal...es.bat
debian-9-mips
Byte-Steal...es.bat
debian-9-mipsel
Byte-Steal...ger.py
ubuntu-18.04-amd64
6Byte-Steal...ger.py
debian-9-armhf
1Byte-Steal...ger.py
debian-9-mips
Byte-Steal...ger.py
debian-9-mipsel
Byte-Steal...fig.py
ubuntu-18.04-amd64
1Byte-Steal...fig.py
debian-9-armhf
1Byte-Steal...fig.py
debian-9-mips
Byte-Steal...fig.py
debian-9-mipsel
Byte-Steal...xe.bat
ubuntu-18.04-amd64
Byte-Steal...xe.bat
debian-9-armhf
Byte-Steal...xe.bat
debian-9-mips
Byte-Steal...xe.bat
debian-9-mipsel
General
- Target Byte-Stealer-main.zip
- Size 288KB
- Sample240608-varjsaec77
- SHA256 f05de9b6474de4f148637a7395864760ac82f1425139e7f9181c5a8b24466928
- MD5 89e36ea44ef411f8db58c64f93805476
- SHA1 3cece73e8bd90f79664063830610e823d887e88a
- SHA512 bc80a45ad6ee2c192428f0a7901a047b441ee9f470c91fecb4275fa39fe3378b13a4b43b15acdd16f36a02e0b2c0e13defb1c0dae05e54e921afb3c1adab0638
- SSDEEP 6144:+mw+hkcq70EhTSvP0zPY3MgNfsGDPHU0Pg3xyqRH2kvRp2sXXHDel:Y+h5MLhMKYc4vLeh5d9al
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
Byte-Stealer-main/ConfigLogger.bat
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
Byte-Stealer-main/ConfigLogger.bat
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
Byte-Stealer-main/ConfigLogger.bat
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
Byte-Stealer-main/ConfigLogger.bat
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral5
Sample
Byte-Stealer-main/Download-Python3.9.12.bat
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral6
Sample
Byte-Stealer-main/Download-Python3.9.12.bat
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral7
Sample
Byte-Stealer-main/Download-Python3.9.12.bat
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral8
Sample
Byte-Stealer-main/Download-Python3.9.12.bat
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral9
Sample
Byte-Stealer-main/Install-Packages.bat
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral10
Sample
Byte-Stealer-main/Install-Packages.bat
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral11
Sample
Byte-Stealer-main/Install-Packages.bat
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral12
Sample
Byte-Stealer-main/Install-Packages.bat
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral13
Sample
Byte-Stealer-main/Logger.py
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral14
Sample
Byte-Stealer-main/Logger.py
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral15
Sample
Byte-Stealer-main/Logger.py
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral16
Sample
Byte-Stealer-main/Logger.py
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral17
Sample
Byte-Stealer-main/ScriptConfig.py
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral18
Sample
Byte-Stealer-main/ScriptConfig.py
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral19
Sample
Byte-Stealer-main/ScriptConfig.py
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral20
Sample
Byte-Stealer-main/ScriptConfig.py
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral21
Sample
Byte-Stealer-main/buildExe.bat
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral22
Sample
Byte-Stealer-main/buildExe.bat
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral23
Sample
Byte-Stealer-main/buildExe.bat
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral24
Sample
Byte-Stealer-main/buildExe.bat
Resource
debian9-mipsel-20240418-en
Malware Config
Targets
-
- Target Byte-Stealer-main/ConfigLogger.bat
- Size 49B
- SHA256 6a8a26ee42a1a68e84e4a0b48f4599164eff8bda7894f2c832337c6af9b4bf2d
- MD5 aa02d6b4fff3cb9849ae186a8a8ad459
- SHA1 94404f3a23b40a3d109eec3c618f9692ee958332
- SHA512 aef4267a4c083abec885856664b450cf3a3dba5849be1729894fa6844877cd9cfc1881942346bc8540c17848d1e66ba3d708b5ec0df73cd9ff9c854af6913654
- MD5 SHA1 SHA512
Score1/10 -
- Target Byte-Stealer-main/Download-Python3.9.12.bat
- Size 844B
- SHA256 8c14ea790560c385b899d34d696223c342706b843ab66a7bae4fe937a2016d00
- MD5 47ff83c78d42f7ec63083fbf14b080e4
- SHA1 c2ac71285ecc16ed70d346446191ae51c62165a0
- SHA512 9ae424dbc55b9a3d2227e913f8a232d4d48aba13d71c9aea1aee9e187bcfe28bb7b89ff4f26b9a42115bcface13a6f8b9a89733d1d47e81682bc879b7891527c
- MD5 SHA1 SHA512
Score1/10 -
- Target Byte-Stealer-main/Install-Packages.bat
- Size 748B
- SHA256 a5ea636da0d1c37697c94936f56986648ff3cb06163b155f41297caec0e17b28
- MD5 cb51aef84152f95dcff9f48082063287
- SHA1 a2072e4f1ba5e10ac3db0f6dcf990471cbf7eb1b
- SHA512 802d331dfbeec28615eab4b50a00826c705cc78e6834cc54842601575595730bb5453ed5fc377415ee4c7b494ee753cf7f7f27e24d09eac9ff878555808fbd91
- MD5 SHA1 SHA512
Score1/10 -
- Target Byte-Stealer-main/Logger.py
- Size 35KB
- SHA256 72b5a0b86f711b1852a31cf79b9193488ef16364c33387d9eaa1ae35247f5c9f
- MD5 6fb9b1ed74c1ad4ef11302df28d72991
- SHA1 a8ad8c43690b8328fa2be10c6933740a931d00ed
- SHA512 b5940e7f7e642ed846703cf826772a3607498f96fd4eda6391bc8c4109cdb8c13103bde6b1e79d5475ef98e5d98f8aa9ef27290410a50e06d956a56bc5a595dd
- SSDEEP 768:Sp717uTnX5jWPcN4bUzPkMYKSyDocIlPlB:S11S5jWPcSbUQhKSyDrIl3
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Legitimate hosting services abused for malware hosting/C2
-
- Target Byte-Stealer-main/ScriptConfig.py
- Size 995B
- SHA256 a7e7ae741b6756ef949dc402ddb2a46a40ecbd0db549c4a3a1a63e974a2cc4bc
- MD5 1a72d0db14ae889555d5d953e1ace315
- SHA1 831edfc05e579edc76735c1ffd15ada49fa72fd6
- SHA512 5ddc064dddee163ec3f732eae3f85bcd137c1b3fcf60ec586e9e9edda880ebdc24509a981bd344daeafcd92ad24cefc786941b00952dab8e2df2edf2767f9b94
- MD5 SHA1 SHA512
Score1/10 -
- Target Byte-Stealer-main/buildExe.bat
- Size 485B
- SHA256 5c2266b0eb1735a2f1be564cb89e43f1a1df75add6c2195ef9ab38dffc64d34b
- MD5 cf8fe53bb0caa1560661a15691814a4d
- SHA1 bd434b814986605929630d7ab3cd35fc840f3623
- SHA512 102e2636a76a61c2e54c671327ecc79c79867be4b159362c6f7597940c2a75f377b834edc7baec16e511d8e41e947f2b8c494d2afade1b7ca3e1180d294a8966
- MD5 SHA1 SHA512
Score1/10