General

  • Target

    62f90cd0cb366fa5daa8aafcdcd16235.exe

  • Size

    307KB

  • MD5

    62f90cd0cb366fa5daa8aafcdcd16235

  • SHA1

    57fd35c5ba228b3b9127dc42ce3c9db3a8848ea9

  • SHA256

    c5307c86c06edb2d3aa14c90563cb59ef865ebbe1eae6a4e2d78db35dfdd79e0

  • SHA512

    2b9661e8a02846fe00cd1ede37e96ae56bad04b8943d714beaa3b6e7548121412a14260805863fa61a9bf13bd8378af8d5eca657464b2c3b82eb5c8e5e14f8d2

  • SSDEEP

    6144:Kiis2YtUokCulxMfpbTXe38CgYFYnE7w+Uw3NKR9hU/W9:rtUoH3pXYtgYFm4wx8KRF9

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

7140196255

C2

http://178.63.215.77

Attributes
  • url_path

    /031d77089be01fd8.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 62f90cd0cb366fa5daa8aafcdcd16235.exe
    .exe windows:5 windows x86 arch:x86

    8e9e6de8c6aa184371108e1074479bb3


    Headers

    Imports

    Sections