General
- Target x3014c0652aaffad7160edb7ba8a08a6f1ec401d0f3f268a64dca8828cbce058f.exe
- Size 593KB
- Sample260329-fp2wqsh15l
- SHA256 3014c0652aaffad7160edb7ba8a08a6f1ec401d0f3f268a64dca8828cbce058f
- MD5 c64d02e25c98ee6b68875e5be6e035db
- SHA1 076db934ad6c6dd89995b144065c5c9a1fa2759a
- SHA512 ceee62c1c399018fa27f7a15d12e0fcf4cd97c2ba7570d0ee6f64863b09caac3143a8a5beafac0d6a443c98776a69527faf398a8c66b0248dc15dbcce3aae574
- SSDEEP 12288:7v/opQf+pKUX2wfWjAu9MXtS6ALSQTbAK4lNl5U:zZe2Hj/QtSzClS
- TLSH T160D49D22759194B6E47705748D78EB558BBDBC700B60AACB23C009D95E706C0EF37B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
x3014c0652aaffad7160edb7ba8a08a6f1ec401d0f3f268a64dca8828cbce058f.exe
Resource
win10v2004-20260129-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
x3014c0652aaffad7160edb7ba8a08a6f1ec401d0f3f268a64dca8828cbce058f.exe
Resource
win11-20260130-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
CursTest1
C2
-
http://91.214.78.81
Attributes
-
url_path
/86e33e36f4a24626.php
rc4.traffic_key
rc4.C2
Targets
-
- Target x3014c0652aaffad7160edb7ba8a08a6f1ec401d0f3f268a64dca8828cbce058f.exe
- Size 593KB
- SHA256 3014c0652aaffad7160edb7ba8a08a6f1ec401d0f3f268a64dca8828cbce058f
- MD5 c64d02e25c98ee6b68875e5be6e035db
- SHA1 076db934ad6c6dd89995b144065c5c9a1fa2759a
- SHA512 ceee62c1c399018fa27f7a15d12e0fcf4cd97c2ba7570d0ee6f64863b09caac3143a8a5beafac0d6a443c98776a69527faf398a8c66b0248dc15dbcce3aae574
- SSDEEP 12288:7v/opQf+pKUX2wfWjAu9MXtS6ALSQTbAK4lNl5U:zZe2Hj/QtSzClS
- TLSH T160D49D22759194B6E47705748D78EB558BBDBC700B60AACB23C009D95E706C0EF37B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10