General
- Target file.exe
- Size 1.8MB
- Sample260624-yk3ataft3m
- SHA256 1737369bee038e31b39e2cb66b9dd18ecbec92a7be1324adc16060682141f2fd
- MD5 00b984f712d36a8761adeb4ac5cc7d48
- SHA1 09d2c4bd431a4e5c9087b1926123b9ad03911d73
- SHA512 c8ac22758e134fca44b38f48bcf12d34ecc5076af50b26f132b19f5b339b1c09ba3fdd7a754097e68e6d0bb940dbe9b465029000fd57a0b808f9e1528230aa97
- SSDEEP 49152:lHtF7b5usfJVCCEmPoYCa5rlRaj6q40I07E3tt+TeJH:179uCVfEKp/ajp7ittr
- TLSH T1D885231033FA90A0F0B54B799CF3415B2A717EA31A35A1DF239866AE1F335C1E936761
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Extracted
Family
-
stealc
Botnet
-
eu1
C2
-
http://193.148.57.10/88004f4d3e32489389ea.php
Attributes
-
url_path
/88004f4d3e32489389ea.php
rc4.traffic_key
rc4.plain
Targets
-
- Target file.exe
- Size 1.8MB
- SHA256 1737369bee038e31b39e2cb66b9dd18ecbec92a7be1324adc16060682141f2fd
- MD5 00b984f712d36a8761adeb4ac5cc7d48
- SHA1 09d2c4bd431a4e5c9087b1926123b9ad03911d73
- SHA512 c8ac22758e134fca44b38f48bcf12d34ecc5076af50b26f132b19f5b339b1c09ba3fdd7a754097e68e6d0bb940dbe9b465029000fd57a0b808f9e1528230aa97
- SSDEEP 49152:lHtF7b5usfJVCCEmPoYCa5rlRaj6q40I07E3tt+TeJH:179uCVfEKp/ajp7ittr
- TLSH T1D885231033FA90A0F0B54B799CF3415B2A717EA31A35A1DF239866AE1F335C1E936761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Suspicious use of SetThreadContext