General
- Target Licence_Version_Loader.exe
- Size 6.9MB
- Sample260209-jsfpfsgs2g
- SHA256 00757772d873cfdf11241fc390c5ad2d2b3a27648656fe6ca502b12d9598cd6e
- MD5 73aac0a6b040be4475ad6cca1b67ef44
- SHA1 4b304b99541f8650dcdfbc94945377310c92528d
- SHA512 46703f018d8bec806c645e740017ed80153817b3fb914a75a4d29379ab794a8144a337ed9eebbf8d8968b9ed39cff009600cd9083d532c8ac86a161e06951d24
- SSDEEP 49152:lY6zC3+h/OzVX4dZEKCDfMY9BAJ2mWDj4kqA+c8OK1do:rC3hVITPCDfMA9xqwUo
- TLSH T139765CB2F89509A1C67FE13498605E91763138680B3E7BD37FA815660D2AFC46B3FB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Licence_Version_Loader.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
NF11e31
C2
-
http://158.94.211.84
Attributes
-
url_path
/843cf72b27dd4a61.php
rc4.plain
rc4.plain
Targets
-
- Target Licence_Version_Loader.exe
- Size 6.9MB
- SHA256 00757772d873cfdf11241fc390c5ad2d2b3a27648656fe6ca502b12d9598cd6e
- MD5 73aac0a6b040be4475ad6cca1b67ef44
- SHA1 4b304b99541f8650dcdfbc94945377310c92528d
- SHA512 46703f018d8bec806c645e740017ed80153817b3fb914a75a4d29379ab794a8144a337ed9eebbf8d8968b9ed39cff009600cd9083d532c8ac86a161e06951d24
- SSDEEP 49152:lY6zC3+h/OzVX4dZEKCDfMY9BAJ2mWDj4kqA+c8OK1do:rC3hVITPCDfMA9xqwUo
- TLSH T139765CB2F89509A1C67FE13498605E91763138680B3E7BD37FA815660D2AFC46B3FB14
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Stealc family