General
- Target stealer.exe
- Size 35.5MB
- Sample260813-l2dybsxapf
- SHA256 ffc5017547dbdf8cf9dfac72d87d144216723caf11cf9ecb49a4d53b4f0bc46d
- MD5 a586113375f972b50827484a2c7786a8
- SHA1 d8841291f5d00db3b0d28d85b6e46a3419214225
- SHA512 8a6680ee5bc897746e8d1cf13f58e0906880cab04171a79bff4ff0e37aa2a6cd00f5f1f897f0bbaf45f689698276f718b7005c9bf3ee90a573bf9a407bc4059b
- SSDEEP 786432:Orv2G4TLcNOZrodmUJAH1hKvuToWAGW8kg1TMegzSNP/tG/l:bTIASJAH1k0oZQTRgzQ/tql
- TLSH T12687336615D109A3FA8AC2368A739166D7E375A43F70894F0B8C82E53EB72D00D3E775
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
stealer.pyc
Resource
win10v2004-20260513-en
16 signatures
600 seconds
Behavioral task
behavioral2
Sample
stealer.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
600 seconds
Malware Config
Targets
-
- Target stealer.pyc
- Size 53KB
- SHA256 426ad54dbaad89e94eaa5d3df4a98d9d0e0737faacec6dc5299945dc983ebfc2
- MD5 8f35f607e8f542c181725dec223d8953
- SHA1 283eb4415f5372797185a09f0252797035a447e6
- SHA512 b5bee961f867348c95b1f67165e082310c4aa5b381a0f8093231e7b5967f98a61c8ae3c2219c603ac3af3d6e7e602784bdb4fe696840ef9824476ab8f7df791c
- SSDEEP 1536:ozr7Wh9QFeb1OWJgcGL6K35Yjo9A6+8dQKOWSQ960VjB:orC9QFMJJgcGL6K35YjiAj8dQKONQ968
- TLSH T1FF4339686910A257FDE8F03932E1DE955722C2497612CB8BF0609DFDECCE3181E9572E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.