General
- Target file.exe
- Size 2.1MB
- Sample260707-3trb5ags2x
- SHA256 8b7537c6624998423c0dc5e63d133a4380df59ff64a623f35f2f669e63061c52
- MD5 4709f0e6e3ec48968747e30fb1323583
- SHA1 ccd8f58632dfdca6ffc48f3f64920bab547ad452
- SHA512 0513f6d321bad4e28d6654e0df0b353ba072142ab6d9cef925b10f2dfc53261962ecf33589d1e07d929d8c3886ff4bd151c0648b69702ee8e14cdd9da733586f
- SSDEEP 49152:dKu7Z0GOnOSieDx2eQlxtIqtcAF+g0clT/HHT:dHF0GOn+eDHQjIqqakc1/n
- TLSH T1F9A5232212D85405E0BA7BBE05F3461E6531BC1593754BEF31E4B8AD8FB35D4E632B0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Extracted
Family
-
stealc
Botnet
-
eu1
C2
-
http://160.20.109.75/d19ca32cb5a444ac8b87.php
Attributes
-
url_path
/d19ca32cb5a444ac8b87.php
rc4.traffic_key
rc4.plain
Targets
-
- Target file.exe
- Size 2.1MB
- SHA256 8b7537c6624998423c0dc5e63d133a4380df59ff64a623f35f2f669e63061c52
- MD5 4709f0e6e3ec48968747e30fb1323583
- SHA1 ccd8f58632dfdca6ffc48f3f64920bab547ad452
- SHA512 0513f6d321bad4e28d6654e0df0b353ba072142ab6d9cef925b10f2dfc53261962ecf33589d1e07d929d8c3886ff4bd151c0648b69702ee8e14cdd9da733586f
- SSDEEP 49152:dKu7Z0GOnOSieDx2eQlxtIqtcAF+g0clT/HHT:dHF0GOn+eDHQjIqqakc1/n
- TLSH T1F9A5232212D85405E0BA7BBE05F3461E6531BC1593754BEF31E4B8AD8FB35D4E632B0A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Suspicious use of SetThreadContext