Overview

overview

10

Static

static

1

26bc9287f3...94.exe

windows10-2004-x64

10

Resubmissions

09/08/2024, 21:10

240809-z1by8starb10

07/12/2023, 06:05

231207-gs66asbbc45

Sharing

Copy URL Twitter E-mail

General

  • Target
    26bc9287f34be69cef7beca9e91c4a4f1de6f5934d9bc643f8d8de7754bda294
  • Size 412KB
  • Sample240809-z1by8starb
  • SHA256 26bc9287f34be69cef7beca9e91c4a4f1de6f5934d9bc643f8d8de7754bda294
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
observerdiscoverystealer

Malware Config

Extracted

Family

  • observer

C2

  • http://5.42.64.41:1337

Targets

    • Target
      26bc9287f34be69cef7beca9e91c4a4f1de6f5934d9bc643f8d8de7754bda294
    • Size 412KB
    • SHA256 26bc9287f34be69cef7beca9e91c4a4f1de6f5934d9bc643f8d8de7754bda294
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    observerdiscoverystealer

    • Observer

      Observer is an infostealer written in C++.

      stealerobserver

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks