General
- Target SecuriteInfo.com.Win64.MalwareX-gen.47427539.exe
- Size 3.0MB
- Sample251116-rlt79syncq
- SHA256 238693578a24dab8184c5ee795cd5369ebc7956adb0eaa6e1a1de7f006d5514b
- MD5 6536f096a328ae37d5de00a68ac0f3d3
- SHA1 c29fab0eba3a1f69492f56c6c7cd568b2f84c243
- SHA512 4cb480b17ebd555896bce7d2113b3ea51df9e3a323997fa6a318e197153d2e0702c8c2b03c3767d6d88d8f952204f74dc6cde68ad624fd58cff1f37750895d32
- SSDEEP 98304:TCSV0/sgCjrX27msBc0yu+TowG0NJeIo:ebkgECTuna2JD
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win64.MalwareX-gen.47427539.exe
Resource
win10v2004-20251016-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
tr1pernn
C2
-
https://ultra-dynamic-systems-247-compute-portal.com
Attributes
-
url_path
/fc98bed393364b52.php
rc4.plain
Targets
-
- Target SecuriteInfo.com.Win64.MalwareX-gen.47427539.exe
- Size 3.0MB
- SHA256 238693578a24dab8184c5ee795cd5369ebc7956adb0eaa6e1a1de7f006d5514b
- MD5 6536f096a328ae37d5de00a68ac0f3d3
- SHA1 c29fab0eba3a1f69492f56c6c7cd568b2f84c243
- SHA512 4cb480b17ebd555896bce7d2113b3ea51df9e3a323997fa6a318e197153d2e0702c8c2b03c3767d6d88d8f952204f74dc6cde68ad624fd58cff1f37750895d32
- SSDEEP 98304:TCSV0/sgCjrX27msBc0yu+TowG0NJeIo:ebkgECTuna2JD
- MD5 SHA1 SHA512 SSDEEP
-
Stealc family
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled