General
- Target stealer.exe
- Size 34.3MB
- Sample260807-dkc1pswepg
- SHA256 9c0065983ff32375397416be9b2f252eee41d40ced6bec87a22716738f6831bd
- MD5 4356c8575cfb66bfaed9e07b6e41710b
- SHA1 9994c3167f85e08f284a30d1c935e614227c27f9
- SHA512 5fc901c330044b56da12569659e77f24a193abb7c1026ef66f5d537992a70ed9827c16d4fcdc30aaa854199076ac313b38fc2ef323e1383282d17cd751c64a4f
- SSDEEP 786432:iqzbS4ce2s732QU58KPFRph2KvuToWAGWLBo+h+st1vl7u//:iqq4f/SQYdNPhZ0oZJlJi/
- TLSH T1F47733AD7E611C7BE8E643344AB55925E2B721A41FE1917F03A84E762E7B3C40E743B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
stealer.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target stealer.exe
- Size 34.3MB
- SHA256 9c0065983ff32375397416be9b2f252eee41d40ced6bec87a22716738f6831bd
- MD5 4356c8575cfb66bfaed9e07b6e41710b
- SHA1 9994c3167f85e08f284a30d1c935e614227c27f9
- SHA512 5fc901c330044b56da12569659e77f24a193abb7c1026ef66f5d537992a70ed9827c16d4fcdc30aaa854199076ac313b38fc2ef323e1383282d17cd751c64a4f
- SSDEEP 786432:iqzbS4ce2s732QU58KPFRph2KvuToWAGWLBo+h+st1vl7u//:iqq4f/SQYdNPhZ0oZJlJi/
- TLSH T1F47733AD7E611C7BE8E643344AB55925E2B721A41FE1917F03A84E762E7B3C40E743B0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Netsh Helper DLL
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1