Overview
overview
6Static
static
1Byte-Steal...er.bat
ubuntu-18.04-amd64
Byte-Steal...er.bat
debian-9-armhf
Byte-Steal...er.bat
debian-9-mips
Byte-Steal...er.bat
debian-9-mipsel
Byte-Steal...12.bat
ubuntu-18.04-amd64
Byte-Steal...12.bat
debian-9-armhf
Byte-Steal...12.bat
debian-9-mips
Byte-Steal...12.bat
debian-9-mipsel
Byte-Steal...es.bat
ubuntu-18.04-amd64
Byte-Steal...es.bat
debian-9-armhf
Byte-Steal...es.bat
debian-9-mips
Byte-Steal...es.bat
debian-9-mipsel
Byte-Steal...ger.py
ubuntu-18.04-amd64
6Byte-Steal...ger.py
debian-9-armhf
1Byte-Steal...ger.py
debian-9-mips
Byte-Steal...ger.py
debian-9-mipsel
Byte-Steal...fig.py
ubuntu-18.04-amd64
1Byte-Steal...fig.py
debian-9-armhf
1Byte-Steal...fig.py
debian-9-mips
Byte-Steal...fig.py
debian-9-mipsel
Byte-Steal...xe.bat
ubuntu-18.04-amd64
Byte-Steal...xe.bat
debian-9-armhf
Byte-Steal...xe.bat
debian-9-mips
Byte-Steal...xe.bat
debian-9-mipsel
Analysis
- max time kernel
0s - max time network
148s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20240508-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
08/06/2024, 16:47
Static task
static1
Behavioral task
behavioral1
Sample
Byte-Stealer-main/ConfigLogger.bat
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
Byte-Stealer-main/ConfigLogger.bat
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral3
Sample
Byte-Stealer-main/ConfigLogger.bat
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral4
Sample
Byte-Stealer-main/ConfigLogger.bat
Resource
debian9-mipsel-20240418-en
Behavioral task
behavioral5
Sample
Byte-Stealer-main/Download-Python3.9.12.bat
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral6
Sample
Byte-Stealer-main/Download-Python3.9.12.bat
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral7
Sample
Byte-Stealer-main/Download-Python3.9.12.bat
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral8
Sample
Byte-Stealer-main/Download-Python3.9.12.bat
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral9
Sample
Byte-Stealer-main/Install-Packages.bat
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral10
Sample
Byte-Stealer-main/Install-Packages.bat
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral11
Sample
Byte-Stealer-main/Install-Packages.bat
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral12
Sample
Byte-Stealer-main/Install-Packages.bat
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral13
Sample
Byte-Stealer-main/Logger.py
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral14
Sample
Byte-Stealer-main/Logger.py
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral15
Sample
Byte-Stealer-main/Logger.py
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral16
Sample
Byte-Stealer-main/Logger.py
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral17
Sample
Byte-Stealer-main/ScriptConfig.py
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral18
Sample
Byte-Stealer-main/ScriptConfig.py
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral19
Sample
Byte-Stealer-main/ScriptConfig.py
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral20
Sample
Byte-Stealer-main/ScriptConfig.py
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral21
Sample
Byte-Stealer-main/buildExe.bat
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral22
Sample
Byte-Stealer-main/buildExe.bat
Resource
debian9-armhf-20240226-en
Behavioral task
behavioral23
Sample
Byte-Stealer-main/buildExe.bat
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral24
Sample
Byte-Stealer-main/buildExe.bat
Resource
debian9-mipsel-20240418-en
General
- Target Byte-Stealer-main/Logger.py
- Size 35KB
- Sample240608-varjsaec77
- SHA256 72b5a0b86f711b1852a31cf79b9193488ef16364c33387d9eaa1ae35247f5c9f
- MD5 6fb9b1ed74c1ad4ef11302df28d72991
- SHA1 a8ad8c43690b8328fa2be10c6933740a931d00ed
- SHA512 b5940e7f7e642ed846703cf826772a3607498f96fd4eda6391bc8c4109cdb8c13103bde6b1e79d5475ef98e5d98f8aa9ef27290410a50e06d956a56bc5a595dd
- SSDEEP 768:Sp717uTnX5jWPcN4bUzPkMYKSyDocIlPlB:S11S5jWPcSbUQhKSyDrIl3
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Legitimate hosting services abused for malware hosting/C2 1 TTPs 14 IoCs
flow ioc 77 camo.githubusercontent.com 78 camo.githubusercontent.com 85 raw.githubusercontent.com 87 raw.githubusercontent.com 88 raw.githubusercontent.com 75 camo.githubusercontent.com 84 raw.githubusercontent.com 86 raw.githubusercontent.com 82 raw.githubusercontent.com 76 camo.githubusercontent.com 81 raw.githubusercontent.com 83 raw.githubusercontent.com 71 camo.githubusercontent.com 72 camo.githubusercontent.com