General
- Target Licence_Version_Loader.exe
- Size 5.6MB
- Sample260209-jscykags2a
- SHA256 363201a7f7d0f230f00ae92bd5e86f1a950fdb3256f1fb2717c5ea610f09bc14
- MD5 f1a9b0fc594dd6a5db0c63e8b018263a
- SHA1 a41a5b15efccb51bf77509b5ce3293b9c51d8cb2
- SHA512 c438b0749aaad5680465dfb600fd6fc508a4a675041c3428888734ceed0d2e51c17f31e7b447701a63c3d6345a38ec6b676af0ac3711be7be24efd4984c1f0a1
- SSDEEP 49152:VntqN3/icyDrvIgMWB6mAkdSh5iA43OzG3jhsKv0bhyMMcYz7jyEnK16vD/e:yN3WvrdSh5iTOz0hsY0boxZPdvDe
- TLSH T10F463912BB9D45A2C6BFE33897506252BE31785443713BD36E9815AA0C2BFC42B3F719
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Licence_Version_Loader.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
NF212D31
C2
-
http://158.94.211.84
Attributes
-
url_path
/843cf72b27dd4a61.php
rc4.plain
rc4.plain
Targets
-
- Target Licence_Version_Loader.exe
- Size 5.6MB
- SHA256 363201a7f7d0f230f00ae92bd5e86f1a950fdb3256f1fb2717c5ea610f09bc14
- MD5 f1a9b0fc594dd6a5db0c63e8b018263a
- SHA1 a41a5b15efccb51bf77509b5ce3293b9c51d8cb2
- SHA512 c438b0749aaad5680465dfb600fd6fc508a4a675041c3428888734ceed0d2e51c17f31e7b447701a63c3d6345a38ec6b676af0ac3711be7be24efd4984c1f0a1
- SSDEEP 49152:VntqN3/icyDrvIgMWB6mAkdSh5iA43OzG3jhsKv0bhyMMcYz7jyEnK16vD/e:yN3WvrdSh5iTOz0hsY0boxZPdvDe
- TLSH T10F463912BB9D45A2C6BFE33897506252BE31785443713BD36E9815AA0C2BFC42B3F719
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Stealc family