General

  • Target

    e9e59ca2c8e786f92e81134f088ea08c53fc4c8c252871613ccc51b473814633

  • Size

    89KB

  • MD5

    b53eee189e09945c07a464d82be57e4e

  • SHA1

    93bf21ecb240ba177734600f6eef642f8a41f229

  • SHA256

    e9e59ca2c8e786f92e81134f088ea08c53fc4c8c252871613ccc51b473814633

  • SHA512

    6a7bc4d1447f5cc906152c591e1f2737c22059d1915febcbe8906eb9fcf2da3e9b33de215ce4498ed01024b57a7e12e9801c4907ca4109e01f94180545782a61

  • SSDEEP

    1536:EOrgQySDTYowOxhyR999vAFH/N1k7SZCHvqxuV/QHzw4iQMTq:uGMt999vUHF5ZCHvguV/QHzw2MTq

Score
10/10

Malware Config

Extracted

Family

exelastealer

C2

https://discord.com/api/webhooks/1152920158470414406/e6cZMhR2c46WKJhAHuxbkYiUUJtxA61zPHZaJSHYHMBE8RWYV1mQZ1ZfleRCDXbyLf_t

Signatures

  • Exelastealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e9e59ca2c8e786f92e81134f088ea08c53fc4c8c252871613ccc51b473814633
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections