General

  • Target

    082796fccb8ffb566a99ba188cae572eac30f1bf6e11a7bf4e5ebe757bc66c88.exe

  • Size

    240KB

  • MD5

    004431fc72fc1228abf10e298efa0271

  • SHA1

    05195b1a70f078c9116998d7486e672d90e93218

  • SHA256

    082796fccb8ffb566a99ba188cae572eac30f1bf6e11a7bf4e5ebe757bc66c88

  • SHA512

    8e1c87b177cd3cd687760f002fea6851ae34b2543df434ed1db4146a33a684f5a386e4e6d9d76bd14e064dd29fe6cc1cb0407cac10abf0c9cd4513eefcac8335

  • SSDEEP

    3072:sCFW6ZRlcV3K+gqCClq/oPk1U894z1tJS7pmLUMOmjoRWwhSeUReHeP3KqX+n:j1J7+go0U8evIFmLu6kKeot+

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

default

C2

https://135.181.65.216

Attributes
  • url_path

    /ee45b7c5e4cb75cb.php

Signatures

  • Stealc family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 082796fccb8ffb566a99ba188cae572eac30f1bf6e11a7bf4e5ebe757bc66c88.exe
    .exe windows:5 windows x86 arch:x86

    d071ac95ea1d6b0ed6ec53017449901f


    Headers

    Imports

    Sections