General

  • Target

    ce4d028bad579c269b92ebf745b0b0f62be01bc80be76e336bb940f79dc3feec

  • Size

    265KB

  • Sample

    231102-1xjeksgb91

  • MD5

    e977c801622a016f1b09e5e08e318c96

  • SHA1

    22b80c67f31d0ce49aea11684a4128f011602f63

  • SHA256

    ce4d028bad579c269b92ebf745b0b0f62be01bc80be76e336bb940f79dc3feec

  • SHA512

    6ca6631748f39923e518c12fbfe821bc573d020857158880b0dc436315bd45950ff3e8c397e5019d82d236bbbc86debc702f1a874f857d6a00b2072bdabf79c9

  • SSDEEP

    3072:RAz57IVbxAkzkG4B4n95GtNxR1bE0v5BqB+UbGCKhqnJFrJ0KZxMt5:4SbxzkGG4nGbxH5BqQUb0EJFuOM

Malware Config

Extracted

Family

stealc

C2

http://henryjackson.icu

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain

Targets

    • Target

      ce4d028bad579c269b92ebf745b0b0f62be01bc80be76e336bb940f79dc3feec

    • Size

      265KB

    • MD5

      e977c801622a016f1b09e5e08e318c96

    • SHA1

      22b80c67f31d0ce49aea11684a4128f011602f63

    • SHA256

      ce4d028bad579c269b92ebf745b0b0f62be01bc80be76e336bb940f79dc3feec

    • SHA512

      6ca6631748f39923e518c12fbfe821bc573d020857158880b0dc436315bd45950ff3e8c397e5019d82d236bbbc86debc702f1a874f857d6a00b2072bdabf79c9

    • SSDEEP

      3072:RAz57IVbxAkzkG4B4n95GtNxR1bE0v5BqB+UbGCKhqnJFrJ0KZxMt5:4SbxzkGG4nGbxH5BqQUb0EJFuOM

    • Stealc

      Stealc is an infostealer written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks