Overview

overview

10

Static

static

10

c29f43cd92...da.exe

windows7-x64

7

c29f43cd92...da.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c29f43cd9249c6c87a0dcdf849c0e2da.exe

  • Size

    1.2MB

  • MD5

    c29f43cd9249c6c87a0dcdf849c0e2da

  • SHA1

    d113978fd12af6a699ab741e444f028c17c1dc62

  • SHA256

    1a5da09e281f4a2acadf791cbad426351a769d2b8057005b1415e74a7ddfb0af

  • SHA512

    b7ea948e81fe65b425b1c115acfd6d2c49b4a0084e62f62ddce38949dc140f94156535405ba4c263413c6103a530d6a1fd784acca35f52c1d63795ffe0093800

  • SSDEEP

    24576:LtOtoXxa+VQlUxX0YulFoPcIZE+r1ipfms:BOtoxKlU8FoP8

Score
10/10
svcstealer

Malware Config

Extracted

Family

svcstealer

Version

3.1

C2

185.81.68.156

176.113.115.149
Attributes
  • url_paths

    /svcstealer/get.php

Signatures

  • Detects SvcStealer Payload 1 IoCs

    SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.

  • Svcstealer family
    svcstealer
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c29f43cd9249c6c87a0dcdf849c0e2da.exe
    .exe windows:6 windows x64 arch:x64

    4b08efbed763524964334e9746c7ffd2


    Headers

    Imports

    Sections