Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://bazaar.abuse...

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://bazaar.abuse.ch/download/a4f2367e3e2e9a8ce919fde4522d4a347e30fa7625ff391b082a5c830acb1a76/

  • Sample

    231008-vrtqgaef6t

Score
10/10
stealcstealer

Malware Config

Extracted

Family

stealc

C2

http://aidandylan.top

Attributes
  • url_path

    /3886d2276f6914c4.php

rc4.plain

Targets

    • Target

      https://bazaar.abuse.ch/download/a4f2367e3e2e9a8ce919fde4522d4a347e30fa7625ff391b082a5c830acb1a76/

    Score
    10/10
    stealcstealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks