General

  • Target

    file

  • Size

    176KB

  • Sample

    231024-gvpzssch48

  • MD5

    9df35ee08d982c22a8e8bbac157f04e1

  • SHA1

    d4ea6693ad91b8f5bd60189d52d734c223deac01

  • SHA256

    04a6c4289f601c803614782d3399e7f8ad80f7e784b65ebae34fcc65d65bcac0

  • SHA512

    49232549287baf9884b8201bc9d048c6fd2209c0f75cd23e16766e719692c055c8a926e412a494ce185fc9849947c2f10ab61a594ae75e18ea5d27c3e32eb692

  • SSDEEP

    3072:/uBNaqxS6x6XUZEKmh3cB6xQE64iVn5susz+Fm0PrmY:6Eqo6x6XUZEKi3ckQX4s6/zLs

Malware Config

Extracted

Family

stealc

C2

http://wy�ttsebastian.top

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain

Targets

    • Target

      file

    • Size

      176KB

    • MD5

      9df35ee08d982c22a8e8bbac157f04e1

    • SHA1

      d4ea6693ad91b8f5bd60189d52d734c223deac01

    • SHA256

      04a6c4289f601c803614782d3399e7f8ad80f7e784b65ebae34fcc65d65bcac0

    • SHA512

      49232549287baf9884b8201bc9d048c6fd2209c0f75cd23e16766e719692c055c8a926e412a494ce185fc9849947c2f10ab61a594ae75e18ea5d27c3e32eb692

    • SSDEEP

      3072:/uBNaqxS6x6XUZEKmh3cB6xQE64iVn5susz+Fm0PrmY:6Eqo6x6XUZEKi3ckQX4s6/zLs

    • Stealc

      Stealc is an infostealer written in C++.

    • Downloads MZ/PE file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks