General
- Target stiller.exe
- Size 6.9MB
- Sample260908-x3fn4axdpc
- SHA256 9fea0e166380030a23f2057db106c7fafd739406c01c135cfd8406edb06dd035
- MD5 c128c9331f02d3e752407cab8545608d
- SHA1 adf8c238d39c46ab26546d5983ab8e9515c71a5d
- SHA512 9635b511b15dadec9ad6231a12ced0258fa6f21f022be2289cd838b7a9fd100b7b5951c2b0412d7afa5059a9c095c8dea49c5c5252a6ed81f3a37ef820cba12c
- SSDEEP 49152:RAUCunaY/MtdfIX/24ql+PfxD4GmudlFv/5ZHG/cqlQIek+aSOsXqavIoKCK5KqO:RvRaVIP24xbLZvU1T4mO+Eg
- TLSH T10F765907EC6558E6C0AEC63489629553BB31BC491B2123DB2B90F3683F73BD4ADB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
stiller.exe
Resource
win10v2004-20260513-en
9 signatures
900 seconds
Malware Config
Targets
-
- Target stiller.exe
- Size 6.9MB
- SHA256 9fea0e166380030a23f2057db106c7fafd739406c01c135cfd8406edb06dd035
- MD5 c128c9331f02d3e752407cab8545608d
- SHA1 adf8c238d39c46ab26546d5983ab8e9515c71a5d
- SHA512 9635b511b15dadec9ad6231a12ced0258fa6f21f022be2289cd838b7a9fd100b7b5951c2b0412d7afa5059a9c095c8dea49c5c5252a6ed81f3a37ef820cba12c
- SSDEEP 49152:RAUCunaY/MtdfIX/24ql+PfxD4GmudlFv/5ZHG/cqlQIek+aSOsXqavIoKCK5KqO:RvRaVIP24xbLZvU1T4mO+Eg
- TLSH T10F765907EC6558E6C0AEC63489629553BB31BC491B2123DB2B90F3683F73BD4ADB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Clipboard Data
Adversaries may collect data stored in the clipboard from users copying information within or between applications.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.