General

  • Target

    3357368c0de34a4cef5c6d90e92b5876586f302f7b9255c00d7009e64c51dc87exe_JC.exe

  • Size

    297KB

  • Sample

    230803-s8hy7afb9t

  • MD5

    8bbd52465d743855b7194d0de0795392

  • SHA1

    28917a114061b758fc188e3cdf4b52a7d44cd0e2

  • SHA256

    3357368c0de34a4cef5c6d90e92b5876586f302f7b9255c00d7009e64c51dc87

  • SHA512

    b0b3519513aca2d759cbf521296de64506cfadc756d3f00991771b4a080ccc352e31c526110e6235736fe5fe94ae9cceaa69352402a4280f7aa6bae837794cc6

  • SSDEEP

    3072:RRFz7kt1bA5f0KfaHbxvwyYZKaEhqsoYAgKLkdscoIJjkK:vFXG1bksqmpw2TqTYlKLLco

Score
10/10

Malware Config

Extracted

Family

stealc

C2

http://adriaenclaeys.top/e9c345fc99a4e67e.php

Targets

    • Target

      3357368c0de34a4cef5c6d90e92b5876586f302f7b9255c00d7009e64c51dc87exe_JC.exe

    • Size

      297KB

    • MD5

      8bbd52465d743855b7194d0de0795392

    • SHA1

      28917a114061b758fc188e3cdf4b52a7d44cd0e2

    • SHA256

      3357368c0de34a4cef5c6d90e92b5876586f302f7b9255c00d7009e64c51dc87

    • SHA512

      b0b3519513aca2d759cbf521296de64506cfadc756d3f00991771b4a080ccc352e31c526110e6235736fe5fe94ae9cceaa69352402a4280f7aa6bae837794cc6

    • SSDEEP

      3072:RRFz7kt1bA5f0KfaHbxvwyYZKaEhqsoYAgKLkdscoIJjkK:vFXG1bksqmpw2TqTYlKLLco

    Score
    10/10
    • Stealc

      Stealc is an infostealer written in C++.

    • Downloads MZ/PE file

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

MITRE ATT&CK Enterprise v15

Tasks