General

  • Target

    stealc_default.exe

  • Size

    80KB

  • Sample

    230327-ymhzysfa49

  • MD5

    415b10d78533886b89be01b61bcbbf50

  • SHA1

    775e7ec1dcd91c6a77b866714031874f69110046

  • SHA256

    862b5233c734d1645ad64a0068d157e61670023f137852924bae189a5e67c5ce

  • SHA512

    51c69ea28d2b63db008b8bae2c0389894217d71213b59979411886dc62f461caad2a1947e3341dcaf473d79cd4f0788b4c3d1d1a8b7e96dcdd0a8d08a5d065af

  • SSDEEP

    1536:BMDb4J5iHi/67i7iHrvI5Z96BLyT/h3djRDLsOfYLowbUOIt/:BMYJ5iHi/67keMf96BWV3dBLYu

Malware Config

Extracted

Family

stealc

C2

http://normanhoffman.top/410b5129171f10ea.php

Targets

    • Target

      stealc_default.exe

    • Size

      80KB

    • MD5

      415b10d78533886b89be01b61bcbbf50

    • SHA1

      775e7ec1dcd91c6a77b866714031874f69110046

    • SHA256

      862b5233c734d1645ad64a0068d157e61670023f137852924bae189a5e67c5ce

    • SHA512

      51c69ea28d2b63db008b8bae2c0389894217d71213b59979411886dc62f461caad2a1947e3341dcaf473d79cd4f0788b4c3d1d1a8b7e96dcdd0a8d08a5d065af

    • SSDEEP

      1536:BMDb4J5iHi/67i7iHrvI5Z96BLyT/h3djRDLsOfYLowbUOIt/:BMYJ5iHi/67keMf96BWV3dBLYu

    • Detects Stealc stealer

    • Stealc

      Stealc is an infostealer written in C++.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks