Overview

overview

10

Static

static

3

d.exe

windows7-x64

10

d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3859aabec735477f07705e4bdb39ddfe.bin

  • Size

    1.2MB

  • Sample

    240114-bnd13ahdcq

  • MD5

    2d1a8a5b1f9494f28fca6199d7df3cba

  • SHA1

    339d738147bdf79c50d23afea799fa9f02fd94f1

  • SHA256

    4b0d82d4ed6fd55b4471ee4ea5feeade6b6cb24b821238fc8a0692d12cac8131

  • SHA512

    1a9f673eb345bd63fe2a989121ebc49b9984304412618bdaac3a697f3c2e7cd3745c9fbe0f832eb5e791069f880b1fe3d2122833229c254bae990f69629346c7

  • SSDEEP

    24576:pB+y6dqxWdnkdEPYOKjQZNPKQCqgtsbz29hQ3dNvlctDm4Y:pEyrykdGeQVdgq/+h6NF4Y

Score
10/10
stealcdiscoverystealer

Malware Config

Extracted

Family

stealc

C2

http://109.107.181.33

Attributes
  • url_path

    /de4846fc29f26952.php

rc4.plain

Targets

    • Target

      d.exe

    • Size

      2.3MB

    • MD5

      bda164229deba9581da386c060171b58

    • SHA1

      d20ebeeba93244d740607dfe395d03c387858a6c

    • SHA256

      bcb2d451f4dfa2303bee79a0ad6b2f060ae508ab7cdd92e6d3f718baf297fca8

    • SHA512

      8f3cc7bf6413508166f7a50247f0624cb96b77039aab5177df8c02ebfb357f68c0eb6c24f4c26bee6a9dfd85997bda211ebd77069ea75c599d3742b94ba39cb9

    • SSDEEP

      49152:ynDcZqvlaRc/Ljj6+fXDHu9IJuD0TfC3o9IuX7K2p6s7Huz5Ig4//L:ynDcsvlaRcjv6+vr+IJuQTfCKIuX7K2R

    Score
    10/10
    stealcdiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks