General

  • Target

    c7c9797f99d24261316008c95abb2896def6799f51fc24cadd4d25acbb447925

  • Size

    163KB

  • MD5

    39a02f1d42e5fd44f2bc2d41e26c5549

  • SHA1

    97df575df6c22b5791d451a5b6a04f37aefd338c

  • SHA256

    c7c9797f99d24261316008c95abb2896def6799f51fc24cadd4d25acbb447925

  • SHA512

    13522a27608af02be54bb64a1446d4702a0c35b3e89dbaefaf837d1f007a62097d29064b7355866543b3de78d28be858a748c4f65fe89d4210a7f92b6a7422e6

  • SSDEEP

    3072:Pj5iuOxGNftsLz4oPAK5QgC6OkAfwnNvPZRaopq:PhOxGNVwI87OkdNvRRa

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

meowsterioland1

C2

http://46.8.238.240

Attributes
  • url_path

    /201a735ed890db75.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c7c9797f99d24261316008c95abb2896def6799f51fc24cadd4d25acbb447925
    .exe windows:5 windows x86 arch:x86

    1ef0d6e4c3554a91026b47d9a27bf6db


    Headers

    Imports

    Sections