General

  • Target

    5e8e0fa80a6ab936f94a262517ccc34ffcd7549edf50889db99b020de0e75433

  • Size

    7.0MB

  • MD5

    fe29a51a1654294ab29c17997136d769

  • SHA1

    97d26a72778d21f1276475d31689c8de9667633e

  • SHA256

    5e8e0fa80a6ab936f94a262517ccc34ffcd7549edf50889db99b020de0e75433

  • SHA512

    d9ffa634225f71dfdb3255342b44db4f76b1c420dfa1b1472b3e4e01540fc6d2c81d55cf5765f25243743b6336fc0d5627ffac02ff78456efb5a98dfc9a29072

  • SSDEEP

    98304:94pAEu/JCq0uT6NXOvyGzQg6x0l3XaGgcVGHkQQClgtiQ5wUBoQ4/5i:9f0Ge8Qx0l8cwrzQ5wUBJB

Score
10/10

Malware Config

Extracted

Family

metastealer

C2

kiyaqoimsiieeyqa.xyz

ssqsmisuowqcwsqo.xyz

ykqmwgsuummieaug.xyz

ewukeskgqswqesiw.xyz

cscqcsgewmwwaaui.xyz

cyoksykiamiscyia.xyz

okgomokemoucqeso.xyz

ikwacuakiqeimwua.xyz

aawcsqqaywckiwmi.xyz

aiqasksgmyeqocei.xyz

qgumcuisgaeyuqqe.xyz

eiesoycamyqqgcea.xyz

ywceswakicsqomqw.xyz

auaieuewouawygku.xyz

cmiascusccywowcs.xyz

uiqkkomkaceqacec.xyz

quqeciymqmkqccqw.xyz

ssqsauuuyyigouou.xyz

aogaakukuugqswcy.xyz

ucgwcwsuqsuwewgc.xyz

Attributes
  • dga_seed

    21845

  • domain_length

    16

  • num_dga_domains

    10000

  • port

    443

Signatures

  • MetaStealer payload 1 IoCs
  • Metastealer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5e8e0fa80a6ab936f94a262517ccc34ffcd7549edf50889db99b020de0e75433
    .dll windows:6 windows x86 arch:x86

    8ac34aa3c4e98f397b033474b0f3b15a


    Headers

    Imports

    Exports

    Sections