General
- Target 5dac4c641637a9848706472ef69c7afb6378a08df559d7b2796b1ce96686ec87.bin.exe
- Size 264KB
- Sample261110-nzpyxsfa59
- SHA256 5dac4c641637a9848706472ef69c7afb6378a08df559d7b2796b1ce96686ec87
- MD5 4f91f44aeef5e46dea662e8b26becb7b
- SHA1 61116f3acf383e309065b2e23cbdc8b00feb6e0a
- SHA512 bb246ded484d84eb350bab85fe31e23ac38a4c977933d7e73d03033c27f15fe47f3bd023bf86a1c5483662ccea273ab621e286c5c86acffb570ff31e3d4bac21
- SSDEEP 3072:hcDTxU7ZsUFLX1OSBsZHvfDMPcNJGdSutY2Oz50ARISFirKoXsH+fKpK:hVfcKGHYPUZmm+rKo1yp
- TLSH T12044189477FC1214F2BF8F79A87454504AB7F427A926D70E1CDA61DC2A32B90EA14B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
5dac4c641637a9848706472ef69c7afb6378a08df559d7b2796b1ce96686ec87.bin.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5dac4c641637a9848706472ef69c7afb6378a08df559d7b2796b1ce96686ec87.bin.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
xorium_stealer
C2
-
https://api.telegram.org/bot8766505463:AAG9ksMl1-GAaiU2uoCmCBP9Eq-z0jbGINc/sendDocument
Attributes
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
Targets
-
- Target 5dac4c641637a9848706472ef69c7afb6378a08df559d7b2796b1ce96686ec87.bin.exe
- Size 264KB
- SHA256 5dac4c641637a9848706472ef69c7afb6378a08df559d7b2796b1ce96686ec87
- MD5 4f91f44aeef5e46dea662e8b26becb7b
- SHA1 61116f3acf383e309065b2e23cbdc8b00feb6e0a
- SHA512 bb246ded484d84eb350bab85fe31e23ac38a4c977933d7e73d03033c27f15fe47f3bd023bf86a1c5483662ccea273ab621e286c5c86acffb570ff31e3d4bac21
- SSDEEP 3072:hcDTxU7ZsUFLX1OSBsZHvfDMPcNJGdSutY2Oz50ARISFirKoXsH+fKpK:hVfcKGHYPUZmm+rKo1yp
- TLSH T12044189477FC1214F2BF8F79A87454504AB7F427A926D70E1CDA61DC2A32B90EA14B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10