Overview

overview

10

Static

static

3

sub_5f2016f22935.exe

windows10-2004-x64

10

sub_5f2016f22935.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    sub_5f2016f22935.bin
  • Size 541KB
  • Sample260524-ccs7aaey6p
  • SHA256 5f2016f22935cea6fa5eafe1e185d6a9b4c14c4b2aa8619ec15a539358cac928
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
observerdiscoverystealer

Malware Config

Extracted

Family

  • observer

C2

  • http://5.42.66.25:3000

Targets

    • Target
      sub_5f2016f22935.bin
    • Size 541KB
    • SHA256 5f2016f22935cea6fa5eafe1e185d6a9b4c14c4b2aa8619ec15a539358cac928
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryobserverstealer

    • Family: Observer

      Observer is an infostealer written in C++.

      stealerobserver
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks