General

  • Target

    92f0f57250f76ec5486dc7ef617f0145e4de09a1d5d95a4fe42cb5393678b7bd

  • Size

    360KB

  • Sample

    230322-rks9kshb98

  • MD5

    80cd3c3c9f857655a2d0944246063de9

  • SHA1

    4e2feec63c0b5806f317dca14ea73dec070b465c

  • SHA256

    92f0f57250f76ec5486dc7ef617f0145e4de09a1d5d95a4fe42cb5393678b7bd

  • SHA512

    0274ce32323b168487e8ef98c21649b3beb9786bc7ad2b6e6bb59ad09f35755b5e976a779daa98dae8ad600c22ac67ed56eea9e81b6d9737bf00cc450270d20b

  • SSDEEP

    3072:8L9jSPDtGeA/uBnDYISJsSt23ZivfSQ7IGSwZKBoqJJ:BTkJI0YJiv/PG

Malware Config

Extracted

Family

stealc

C2

http://jerrysmith.online

Targets

    • Target

      92f0f57250f76ec5486dc7ef617f0145e4de09a1d5d95a4fe42cb5393678b7bd

    • Size

      360KB

    • MD5

      80cd3c3c9f857655a2d0944246063de9

    • SHA1

      4e2feec63c0b5806f317dca14ea73dec070b465c

    • SHA256

      92f0f57250f76ec5486dc7ef617f0145e4de09a1d5d95a4fe42cb5393678b7bd

    • SHA512

      0274ce32323b168487e8ef98c21649b3beb9786bc7ad2b6e6bb59ad09f35755b5e976a779daa98dae8ad600c22ac67ed56eea9e81b6d9737bf00cc450270d20b

    • SSDEEP

      3072:8L9jSPDtGeA/uBnDYISJsSt23ZivfSQ7IGSwZKBoqJJ:BTkJI0YJiv/PG

    • Detects Stealc stealer

    • Stealc

      Stealc is an infostealer written in C++.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks