Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b1538d09a2374d64a845d748f8008438e53938bea792c05bdcf926dfd4503e1

  • Size

    187KB

  • MD5

    3c18dac89d980c0102252ad706634952

  • SHA1

    4f92c678de5867fcec46dff19560390a7affbc7c

  • SHA256

    5b1538d09a2374d64a845d748f8008438e53938bea792c05bdcf926dfd4503e1

  • SHA512

    fa184527e6165bc8e17373c2687d927b8bfb97f1140f111cfb3cbfbb7a54bb7d00961a810a73cc8b353e20b0d8c3b117167e4351e9d482c9297687e16a6f254d

  • SSDEEP

    3072:2JlgTFj5qDao8KaxfE54HnnGSail+bOX8bUk3phFHJKa:2J65j5Ka2aOanGSabYSZhFpKa

Score
10/10
valencigastealc

Malware Config

Extracted

Family

stealc

Botnet

valenciga

C2

http://91.225.219.163

Attributes
  • url_path

    /7e93b9fd3ae92094.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5b1538d09a2374d64a845d748f8008438e53938bea792c05bdcf926dfd4503e1
    .exe windows:5 windows x86 arch:x86

    75f38a281962eafd8c14d2b02cfcdab6


    Headers

    Imports

    Sections