General

  • Target

    03eccfa5dea23fc185bcca277520d7ef473ff752649aac485ac055dd4111b2c1

  • Size

    280KB

  • Sample

    230803-qgdjaadc96

  • MD5

    789eaea81291addedd12202fac777c8a

  • SHA1

    a790504363ecbc2308e625a6a9fb6b4978a321fd

  • SHA256

    03eccfa5dea23fc185bcca277520d7ef473ff752649aac485ac055dd4111b2c1

  • SHA512

    a1a2fcd4025b65dfed3b1e8f05025889a76787ab75c757adc79c714140973634a485a06f421cfebbaa5bf4682b7ab687c38321fd3450ea63164ba4c22318197b

  • SSDEEP

    3072:ZtOpyD58tS/0MmL+JmSxT/fgd3fn8jJaVxmB+AEEb8jRMvw85oicKpSdBqI3:Ey6tG0MmLrSxT/oxaxB+AxHoi/SDn

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://adriaenclaeys.top/e9c345fc99a4e67e.php

Targets

    • Target

      03eccfa5dea23fc185bcca277520d7ef473ff752649aac485ac055dd4111b2c1

    • Size

      280KB

    • MD5

      789eaea81291addedd12202fac777c8a

    • SHA1

      a790504363ecbc2308e625a6a9fb6b4978a321fd

    • SHA256

      03eccfa5dea23fc185bcca277520d7ef473ff752649aac485ac055dd4111b2c1

    • SHA512

      a1a2fcd4025b65dfed3b1e8f05025889a76787ab75c757adc79c714140973634a485a06f421cfebbaa5bf4682b7ab687c38321fd3450ea63164ba4c22318197b

    • SSDEEP

      3072:ZtOpyD58tS/0MmL+JmSxT/fgd3fn8jJaVxmB+AEEb8jRMvw85oicKpSdBqI3:Ey6tG0MmLrSxT/oxaxB+AxHoi/SDn

    Score
    10/10
    • Stealc

      Stealc is an infostealer written in C++.

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v15

Tasks