General

  • Target

    3c2245fb7f3d374d8685a573a6cafbe79b5807f0f8cbd52f0cf4a203b785ab06

  • Size

    187KB

  • MD5

    ca10bc5dbf009b6df405c2ccbdd22efb

  • SHA1

    d1c8f25dac637ba857ec28a0ffcfafa73e23a622

  • SHA256

    3c2245fb7f3d374d8685a573a6cafbe79b5807f0f8cbd52f0cf4a203b785ab06

  • SHA512

    61d6eba16eb34dcb230c15d11aad0c8ce8c64b79a886c6acfbf58dac777f32521d2d9ffb9d645a6cc763bfc0aa9bba403c469ba24eb814e3a009d0ab7f30daf8

  • SSDEEP

    3072:c1VB1NFj5qD6o8KaxfE54HnnGiayl+beX8na5acUsRFrJKa:c171jj5q62aOanGiqbIzUGFdKa

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

sila

C2

http://85.28.47.31

Attributes
  • url_path

    /5499d72b3a3e55be.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c2245fb7f3d374d8685a573a6cafbe79b5807f0f8cbd52f0cf4a203b785ab06
    .exe windows:5 windows x86 arch:x86

    75f38a281962eafd8c14d2b02cfcdab6


    Headers

    Imports

    Sections