Overview

overview

10

Static

static

10

ed2070decb...6N.exe

windows7-x64

10

ed2070decb...6N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed2070decb4423318b98442a422157e42cad8e572c56c69f83911f09551a84b6N.exe

  • Size

    5.1MB

  • MD5

    0d8ef911a6f021a7fc2526f492ce13f0

  • SHA1

    21d3e348c2e291fbdcd2ed3eb5dd514c4979ddef

  • SHA256

    ed2070decb4423318b98442a422157e42cad8e572c56c69f83911f09551a84b6

  • SHA512

    9228c3dfdffcbbd5161db449ba9f9518350f87cdcd91dc916b50c0a661d3bc10acebb63fa6f9c7c39b2f30fa98e29c741a10f262cb61d08fbc9da13c941da032

  • SSDEEP

    49152:Q7JJ4RU7l4c+UDsn26xTVNpfYMlODRBQ3EYiBLwFOeI:Q1SRUpf+Ws5YMlA43YBLwFxI

Score
10/10
drumstealc

Malware Config

Extracted

Family

stealc

Botnet

drum

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Signatures

  • Stealc family
    stealc
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ed2070decb4423318b98442a422157e42cad8e572c56c69f83911f09551a84b6N.exe
    .exe windows:5 windows x86 arch:x86

    2eabe9054cad5152567f0699947a2c5b


    Headers

    Imports

    Sections