General

  • Target

    58825871ca0dfd21bc75bb69b99d2e47.exe

  • Size

    262KB

  • Sample

    231011-mgtzgsgf61

  • MD5

    58825871ca0dfd21bc75bb69b99d2e47

  • SHA1

    eeeaed2f0abd24e16462e2a405ef66a7cbcca5ff

  • SHA256

    282aa1b81b2c4cbe70b8a71d3c0095902e248c4940456b82f36f078765fc395a

  • SHA512

    cae54b636680c0910f9c4c72a3851f5ee85ea15a223e0ee6def861883591bb1208f6da3436f5c964e26e86e9aa99cd89763a6a660319c0268d1f1795190513c1

  • SSDEEP

    3072:qnrj/Xh6m1LmKys824ldJA5o2lm4XSancY4T5cz6TOac:oAm1Dvn4ldgG4Cybz6TO

Malware Config

Extracted

Family

stealc

C2

http://jesseaustin.top

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain

Targets

    • Target

      58825871ca0dfd21bc75bb69b99d2e47.exe

    • Size

      262KB

    • MD5

      58825871ca0dfd21bc75bb69b99d2e47

    • SHA1

      eeeaed2f0abd24e16462e2a405ef66a7cbcca5ff

    • SHA256

      282aa1b81b2c4cbe70b8a71d3c0095902e248c4940456b82f36f078765fc395a

    • SHA512

      cae54b636680c0910f9c4c72a3851f5ee85ea15a223e0ee6def861883591bb1208f6da3436f5c964e26e86e9aa99cd89763a6a660319c0268d1f1795190513c1

    • SSDEEP

      3072:qnrj/Xh6m1LmKys824ldJA5o2lm4XSancY4T5cz6TOac:oAm1Dvn4ldgG4Cybz6TO

    • Stealc

      Stealc is an infostealer written in C++.

    • Downloads MZ/PE file

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks