General
- Target Firstrunnner.exe
- Size 1.9MB
- Sample260924-ll5fcasckc
- SHA256 63bbccfcd5235a91bedd2c5640d7f4528a712813062db33431811149fe2b8afe
- MD5 6c0a7f88c7e4833118de099fbbb28c05
- SHA1 f06ba242b8822eed0e7ce6529deb31341f14e2ca
- SHA512 9003b9fb805ad570c705f197e1716a726b3539fb9d2121b56d9e903674eb747e8a7b77754987b5043aa02734e5389c8f98d492dcad8ce764bed85b03b3ef0087
- SSDEEP 49152:IU8Kmz9/JlCIrEJDPG6xJRA2GoC3d3nJz27exiCz5q6t:YzpXCIrEJSmA2tC3d3c7W7
- TLSH T12095232251D4086BD0B1D674C8F3569BAA337C940B2476CF12E8988FAF736D9F436716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Extracted
Family
-
stealc
C2
-
http://31.56.19.29
rc4.plain
Targets
-
- Target Firstrunnner.exe
- Size 1.9MB
- SHA256 63bbccfcd5235a91bedd2c5640d7f4528a712813062db33431811149fe2b8afe
- MD5 6c0a7f88c7e4833118de099fbbb28c05
- SHA1 f06ba242b8822eed0e7ce6529deb31341f14e2ca
- SHA512 9003b9fb805ad570c705f197e1716a726b3539fb9d2121b56d9e903674eb747e8a7b77754987b5043aa02734e5389c8f98d492dcad8ce764bed85b03b3ef0087
- SSDEEP 49152:IU8Kmz9/JlCIrEJDPG6xJRA2GoC3d3nJz27exiCz5q6t:YzpXCIrEJSmA2tC3d3c7W7
- TLSH T12095232251D4086BD0B1D674C8F3569BAA337C940B2476CF12E8988FAF736D9F436716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Stealc stealer Version 3
-
Executes dropped EXE
-
Suspicious use of SetThreadContext