General

  • Target

    f815d049a6a6d48490cf015d7534e08a54e86e7dc0f27c3e486261c34ce4e1b7

  • Size

    7.3MB

  • MD5

    0932aa7da0c7859403b0faab158a3b9f

  • SHA1

    a610f33b67a17a4a40c0f3212f20de8007a95b27

  • SHA256

    f815d049a6a6d48490cf015d7534e08a54e86e7dc0f27c3e486261c34ce4e1b7

  • SHA512

    f911065f690977ab68adac326bdfc4d5002cd66b19d1b41aaae72cc2e2aa2568b6068372914b53e086aaa83227b54ba92b1a5e3e25582b4e68743afd9e498946

  • SSDEEP

    98304:QPGJtF4RIwybhCxLByT+EQKm/cfSeH1VcA4d1PYAPVy:CGh6ybbWc6eUjPYmy

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes
  • url_path

    /6c4adf523b719729.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f815d049a6a6d48490cf015d7534e08a54e86e7dc0f27c3e486261c34ce4e1b7
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections