General

  • Target

    09e6dc2b8078d3dd8f661b718bfa1b51.exe

  • Size

    253KB

  • Sample

    231105-we5gwabe76

  • MD5

    09e6dc2b8078d3dd8f661b718bfa1b51

  • SHA1

    0179a6d09224b0f764140218af8005d3d253966b

  • SHA256

    2bee29bac294615a9d1b613ba775972cda26781938e3ae3aa60ad9737f1fbde8

  • SHA512

    884540c36743c7488c3e117e41319e9abe48a0af708c27336550dea6a387d4d3f16970417f9b5b49d3ec11bb1872e0e7d0d2ea4a4f42af25a27995297ba6f15d

  • SSDEEP

    3072:cFRNd9JnGLn/tFCmpnnbTLQ8lHVvJ+5vxjyOgPBWQeNUtlkq5X+blVEf:mRNd9tGLnlFJpnbTLQ8JWp+OQFtt+DI

Malware Config

Extracted

Family

stealc

C2

http://robertjohnson.top

Attributes
  • url_path

    /e9c345fc99a4e67e.php

rc4.plain

Targets

    • Target

      09e6dc2b8078d3dd8f661b718bfa1b51.exe

    • Size

      253KB

    • MD5

      09e6dc2b8078d3dd8f661b718bfa1b51

    • SHA1

      0179a6d09224b0f764140218af8005d3d253966b

    • SHA256

      2bee29bac294615a9d1b613ba775972cda26781938e3ae3aa60ad9737f1fbde8

    • SHA512

      884540c36743c7488c3e117e41319e9abe48a0af708c27336550dea6a387d4d3f16970417f9b5b49d3ec11bb1872e0e7d0d2ea4a4f42af25a27995297ba6f15d

    • SSDEEP

      3072:cFRNd9JnGLn/tFCmpnnbTLQ8lHVvJ+5vxjyOgPBWQeNUtlkq5X+blVEf:mRNd9tGLnlFJpnbTLQ8JWp+OQFtt+DI

    • Stealc

      Stealc is an infostealer written in C++.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks