Resubmissions

12-08-2024 12:54

240812-p49pka1hqp 10

12-08-2024 11:14

240812-nb7ttssgjb 10

26-06-2024 06:16

240626-g1gwdazbqd 10

General

  • Target

    0cdf89055417947a9ad53cf38eb0f75e.exe

  • Size

    158KB

  • MD5

    0cdf89055417947a9ad53cf38eb0f75e

  • SHA1

    a6d845cd643409201b603f3918c4c45b9afb8111

  • SHA256

    3b949e360f85236eb66eafa4eeda2ffffb0fb01562767550e75dfb4bf09f0eaf

  • SHA512

    8a2523617d4f3c68bd76c9c6f9da358d933b5e71312e25c8ce3a095c3225ba2abea0873ba0c895dea7c374346d3cda5a030557a895b990f1d7a623adb2d2aa20

  • SSDEEP

    3072:hQH5iOMxGNftsLz4oPFKUQgC6OEYkUjUMNW82QZRaop5:hQNMxGNVwtB7OEAoWRa

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

3

C2

http://93.123.39.132

Attributes
  • url_path

    /129edec4272dc2c8.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0cdf89055417947a9ad53cf38eb0f75e.exe
    .exe windows:5 windows x86 arch:x86

    1ef0d6e4c3554a91026b47d9a27bf6db


    Headers

    Imports

    Sections