General
- Target ModernStealer_debug.exe
- Size 343KB
- Sample260826-e8q3xayxgy
- SHA256 9f2c620fcbab332d93402e0b1674469147c34690a33451a184f87b75d5f5177b
- MD5 be58589a35cd2b6fda02855a398321cf
- SHA1 0100211e6d3ba2f8c51ab62b451b187f79385f6d
- SHA512 f38a72c536aa0738a9e148b18a1bece21f0a8c36327979b68df374bb08bdf8731007aaf544819c0fe6b8a2a08db6355bb7279a1d4b0e2790a463aff8a35fa953
- SSDEEP 6144:v3uBjjA25TTSM2sxkogRWC6ZzUV+pR56bqMAqVxU3p9o:fuBXA25yM2siTuZYV+T56bquGo
- TLSH T10E749E15F7A914F9E17BC17CC9524906EB727C4A0770ABCF23A44A962F236E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ModernStealer_debug.exe
Resource
win10v2004-20260513-fr
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
ModernStealer_debug.exe
Resource
win11ltsc2024-20260709-fr
9 signatures
150 seconds
Malware Config
Targets
-
- Target ModernStealer_debug.exe
- Size 343KB
- SHA256 9f2c620fcbab332d93402e0b1674469147c34690a33451a184f87b75d5f5177b
- MD5 be58589a35cd2b6fda02855a398321cf
- SHA1 0100211e6d3ba2f8c51ab62b451b187f79385f6d
- SHA512 f38a72c536aa0738a9e148b18a1bece21f0a8c36327979b68df374bb08bdf8731007aaf544819c0fe6b8a2a08db6355bb7279a1d4b0e2790a463aff8a35fa953
- SSDEEP 6144:v3uBjjA25TTSM2sxkogRWC6ZzUV+pR56bqMAqVxU3p9o:fuBXA25yM2siTuZYV+T56bquGo
- TLSH T10E749E15F7A914F9E17BC17CC9524906EB727C4A0770ABCF23A44A962F236E09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Clears Windows event logs
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.