General
- Target FLiNG-Standalone.25.14.zip
- Size 140.7MB
- Sample251016-ajb58sfv2a
- SHA256 e71537b867848934002aa039fdc699b5f254ff0e79c123ebad89a6fdde90b533
- MD5 1e4c05f3c139c48d8bff6bd86eae5788
- SHA1 2fdb2810550ecf6ee3b82157c1dfdb4c50ffbc8e
- SHA512 41904a4f959d41fb68e689f6ad06eea0a491e4853078f4222aec04ba363344283dd0dd8328482458ef5d594ce1e6a7207839cff12391539e289aa35d6d8a8933
- SSDEEP 3145728:T6pfTv8m8QD263gtDgqOo1n5MMEqDCJLo7MP7ZhMC5rICbrbZnyt1G2:G1Tx3r3gth36M1gogDksZyt1Z
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
FLiNG-Standalone.287.4.exe
Resource
win10v2004-20250502-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
FLiNG-Standalone.287.4.exe
Resource
win11-20250610-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
borlndmm.dll
Resource
win10v2004-20250619-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
borlndmm.dll
Resource
win11-20250905-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
FLN111
C2
-
http://198.251.84.9
Attributes
-
url_path
/0f257d2af7624e84.php
rc4.plain
Targets
-
- Target FLiNG-Standalone.287.4.exe
- Size 3.4MB
- SHA256 41999a3d0da035ff8068905c90235ea50121329cb0661e38d745974ebf5e3ae2
- MD5 cf64c7e2e3897ae5fce3d5414e3d1d27
- SHA1 c333a821f1764abe2aed2c1ab27d2349f64e4264
- SHA512 3ac217e166ea07cdffb13c949100cf707041c7ee8e842ae4f35e0c529064b610fadcca2782e6de8c8e08e2649487a381f529fda3a53ec31da5ba1394c71d2fb1
- SSDEEP 49152:dcOFPISimLMS5M3B3Kul+XYbxzSv199mMc0NWd:F5z0
- MD5 SHA1 SHA512 SSDEEP
Stealc family
-
- Target borlndmm.dll
- Size 50.2MB
- SHA256 059c9289029b941e7b238f5b3101bfc5f15d6c56f2fff8a711ccf0aaad4b9992
- MD5 32b97ae418ef08cd6d78b0d6393bea4d
- SHA1 0d3c7c35b9c8b0e4bb9087baf3c8be30b40574da
- SHA512 536baf2b049dea5494f07ad349cb35e851303e936f082eb2fb3fae0d2048552c1a4a57bac3b139f4ba9fd33bb4257acb22aac2a1fc26e8ae8c7bf74ba71941a1
- SSDEEP 1572864:isJJs/zu0KsJJs/2u0KXwyRiT2bQEnTRS/ulKKLeCe2YET+BDVpPz:XC/zu0PC/2u0KXwoyZ+R6ulKKaCe27Tc
- MD5 SHA1 SHA512 SSDEEP
Score1/10