Overview

overview

10

Static

static

10

stealc_Pookang.exe

windows7-x64

10

stealc_Pookang.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Build_45.147.197.114.zip

  • Size

    46KB

  • MD5

    ffc4d3e90591d4d7b09b37291ef1a58f

  • SHA1

    6e511efdbc674f6668404589bd5a255ff1fcbacd

  • SHA256

    dd74067b0b40372f87a28c63191b79f3edea4d6fd6fd0d5f26b5d43fa8e05726

  • SHA512

    cad43505e915c614876eeaf2818c6566b6962d92755b92d1b5ecc4965c56c454f375b946de5c75497cccfb68eebaec64ff3a34073fa4d09ab4e306266a0a3a74

  • SSDEEP

    768:PrdD0FcUVOTNPq6FEYor1ca9q24Nw5/im/Gj/KtsJoSu4tGfEvlULC5QJNwlU3Xu:Prt+cUV8o2eca9q24Cim/Gj9Jht9lULc

Score
10/10
pookangstealc

Malware Config

Extracted

Family

stealc

Botnet

Pookang

C2

http://45.147.197.114

Attributes
  • url_path

    /ed477c8cc2206093.php

rc4.plain

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Build_45.147.197.114.zip
    .zip
  • stealc_Pookang.exe
    .exe windows:5 windows x86 arch:x86

    372dad7e771f409df9ab1b912548c291


    Headers

    Imports

    Sections