General
- Target 74a6fa03981a6b2d72a3806802d27c2524fdff0b8f15d735346a7f380db5fc69.exe
- Size 1.3MB
- Sample260910-mk32kaar9z
- SHA256 74a6fa03981a6b2d72a3806802d27c2524fdff0b8f15d735346a7f380db5fc69
- MD5 5d68834f005bf67a46fdf1a7de4bbdce
- SHA1 42adc27dd55edd780d3f7131db8ea34f9dd1c395
- SHA512 bff280d93e0debe66310dcf4aad4bf7a85a056cf4faec2f8964bc1654b57ba24248b1bab53a5c0ff263e40e85d515c4f3cba097412341f1bf4698544cb57ebbc
- SSDEEP 24576:Pooan5xrl9YoyhA+U1Ih6a+ruOU3X+rwOnF6wb:PRan5dleo0AjICa+JYwb
- TLSH T10E556C5267836D83D81F7B7928FBB19A45B26662E3181253C133773A3EB013E35C6798
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
74a6fa03981a6b2d72a3806802d27c2524fdff0b8f15d735346a7f380db5fc69.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
C2
-
https://cloud-flare-authenticator.click
rc4.plain
Targets
-
- Target 74a6fa03981a6b2d72a3806802d27c2524fdff0b8f15d735346a7f380db5fc69.exe
- Size 1.3MB
- SHA256 74a6fa03981a6b2d72a3806802d27c2524fdff0b8f15d735346a7f380db5fc69
- MD5 5d68834f005bf67a46fdf1a7de4bbdce
- SHA1 42adc27dd55edd780d3f7131db8ea34f9dd1c395
- SHA512 bff280d93e0debe66310dcf4aad4bf7a85a056cf4faec2f8964bc1654b57ba24248b1bab53a5c0ff263e40e85d515c4f3cba097412341f1bf4698544cb57ebbc
- SSDEEP 24576:Pooan5xrl9YoyhA+U1Ih6a+ruOU3X+rwOnF6wb:PRan5dleo0AjICa+JYwb
- TLSH T10E556C5267836D83D81F7B7928FBB19A45B26662E3181253C133773A3EB013E35C6798
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stealc stealer Version 3
-
Executes dropped EXE