Overview

overview

10

Static

static

3

c757b2a26b...b6.exe

windows7-x64

10

c757b2a26b...b6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c757b2a26b5de65ae11d70bdc98439b6.exe

  • Size

    271KB

  • Sample

    230825-n71qdsdc3y

  • MD5

    c757b2a26b5de65ae11d70bdc98439b6

  • SHA1

    54c9fcae3ac63003fababd6e6bf847f5a877ae09

  • SHA256

    480afef1f95b2130b1dfceafb7f5639d962c9957e003863dc30f6f7ed40ee79d

  • SHA512

    7e5b528c9ac035f491b43a6364f2ff509954726ffb01f6ca6c80057bdca0c19641c7cb631069f5642a4fe8ba583ce370f37dfc7abf16e60b5d4d2e7918519093

  • SSDEEP

    6144:MMpTULJ6bxrM//czTECaTnkpadmTaRrN:MMpTU16FrM3cHbaTnsFa3

Score
10/10
stealcspywarestealer

Malware Config

Targets

    • Target

      c757b2a26b5de65ae11d70bdc98439b6.exe

    • Size

      271KB

    • MD5

      c757b2a26b5de65ae11d70bdc98439b6

    • SHA1

      54c9fcae3ac63003fababd6e6bf847f5a877ae09

    • SHA256

      480afef1f95b2130b1dfceafb7f5639d962c9957e003863dc30f6f7ed40ee79d

    • SHA512

      7e5b528c9ac035f491b43a6364f2ff509954726ffb01f6ca6c80057bdca0c19641c7cb631069f5642a4fe8ba583ce370f37dfc7abf16e60b5d4d2e7918519093

    • SSDEEP

      6144:MMpTULJ6bxrM//czTECaTnkpadmTaRrN:MMpTU16FrM3cHbaTnsFa3

    Score
    10/10
    stealcspywarestealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Downloads MZ/PE file

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks