General
- Target x89589e2220b84b22007ff41a7c86429e659bba64cdb9e4d86de48d6649b19464.exe
- Size 593KB
- Sample260710-fywfbadv6p
- SHA256 89589e2220b84b22007ff41a7c86429e659bba64cdb9e4d86de48d6649b19464
- MD5 8b1c3c82da3e2d1e875985cd1f94bf95
- SHA1 23b9f491202b568bc1166443eb0e5eac15fb9318
- SHA512 b713296d49ea8e8ca44ff4c32ebd071c2d912b4664cf14dabbec07f579f4720fe559eac91d3210067f5b01461094dba8b1a0f68bc6e23b6e36ed56b2f3fc718c
- SSDEEP 12288:jisPjzk6lhmML3Wc535MLcY91fO6ALSQTbAK4lxl5:uQF9bFrMIm1fOz+l
- TLSH T1D1D49F02B56194B7E4730534D868AB94AFBDBC700F605ACB53D409AA7E70AC0AF37B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
x89589e2220b84b22007ff41a7c86429e659bba64cdb9e4d86de48d6649b19464.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
x89589e2220b84b22007ff41a7c86429e659bba64cdb9e4d86de48d6649b19464.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
qwfwrgf
C2
-
http://158.94.210.74
Attributes
-
url_path
/4d4b240c75954580.php
rc4.traffic_key
rc4.C2
Targets
-
- Target x89589e2220b84b22007ff41a7c86429e659bba64cdb9e4d86de48d6649b19464.exe
- Size 593KB
- SHA256 89589e2220b84b22007ff41a7c86429e659bba64cdb9e4d86de48d6649b19464
- MD5 8b1c3c82da3e2d1e875985cd1f94bf95
- SHA1 23b9f491202b568bc1166443eb0e5eac15fb9318
- SHA512 b713296d49ea8e8ca44ff4c32ebd071c2d912b4664cf14dabbec07f579f4720fe559eac91d3210067f5b01461094dba8b1a0f68bc6e23b6e36ed56b2f3fc718c
- SSDEEP 12288:jisPjzk6lhmML3Wc535MLcY91fO6ALSQTbAK4lxl5:uQF9bFrMIm1fOz+l
- TLSH T1D1D49F02B56194B7E4730534D868AB94AFBDBC700F605ACB53D409AA7E70AC0AF37B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10