General
- Target cc5b2bf704b333bad115a0c656c065ae8b04eb15999e6f1e3c1ea9368b00b150
- Size 1.2MB
- Sample260219-sxtxbagt7c
- SHA256 cc5b2bf704b333bad115a0c656c065ae8b04eb15999e6f1e3c1ea9368b00b150
- MD5 f79b265a8ceba1b2cc8ba15cc287300d
- SHA1 47f8aa9c3119e217bc8f82e612d24864dd0fd187
- SHA512 3f9e3d0f95a5a2272db06eba4073508453ec5a78f0007b19c75f3b926b082ce84e56150b995cd1090389a11baff0447aa992964df2564d4bf98cb43cefd78b7d
- SSDEEP 24576:I6Z8FilvUuizK0FM6zxK8cSlKTXrpJomf1gdWcn:uwcuWFJAT7kmqjn
- TLSH T1C855E018ACBA80D5FCC300726B56A212E9777DBB8F18A97740ECC7201649DDD1B2B776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cc5b2bf704b333bad115a0c656c065ae8b04eb15999e6f1e3c1ea9368b00b150.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
cc5b2bf704b333bad115a0c656c065ae8b04eb15999e6f1e3c1ea9368b00b150.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
LogsDillerCloud
C2
-
http://giveitupthousands.shop
Attributes
-
url_path
/87669a9881221201.php
rc4.plain
Targets
-
- Target cc5b2bf704b333bad115a0c656c065ae8b04eb15999e6f1e3c1ea9368b00b150
- Size 1.2MB
- SHA256 cc5b2bf704b333bad115a0c656c065ae8b04eb15999e6f1e3c1ea9368b00b150
- MD5 f79b265a8ceba1b2cc8ba15cc287300d
- SHA1 47f8aa9c3119e217bc8f82e612d24864dd0fd187
- SHA512 3f9e3d0f95a5a2272db06eba4073508453ec5a78f0007b19c75f3b926b082ce84e56150b995cd1090389a11baff0447aa992964df2564d4bf98cb43cefd78b7d
- SSDEEP 24576:I6Z8FilvUuizK0FM6zxK8cSlKTXrpJomf1gdWcn:uwcuWFJAT7kmqjn
- TLSH T1C855E018ACBA80D5FCC300726B56A212E9777DBB8F18A97740ECC7201649DDD1B2B776
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Stealc family
-
Suspicious use of SetThreadContext