General

  • Target

    7e20aa23f67127f4cb8068045efe69b9.exe

  • Size

    173KB

  • Sample

    240202-vzt17sdebm

  • MD5

    7e20aa23f67127f4cb8068045efe69b9

  • SHA1

    05a2cf7984fde6ba5776f8b4b4b1e1e25d94bfc1

  • SHA256

    e1fa577ef8003809c87669e2577463d7c1b1873e0b6300524b1f782687969d83

  • SHA512

    6b7c545aefb536f14f1b020331832045675b70701da2568ef178144116e2e14001231384cab0c610ae98bc7c551fe90c558951fbf21d71634ff1819d044def9d

  • SSDEEP

    3072:fbW/nQcMu/kayTftJ+hTioWDpuOtlYGu7c:fbWH/ka6M4T

Malware Config

Extracted

Family

stealc

C2

http://104.245.33.157

Attributes
  • url_path

    /99210de056092a58.php

rc4.plain

Targets

    • Target

      7e20aa23f67127f4cb8068045efe69b9.exe

    • Size

      173KB

    • MD5

      7e20aa23f67127f4cb8068045efe69b9

    • SHA1

      05a2cf7984fde6ba5776f8b4b4b1e1e25d94bfc1

    • SHA256

      e1fa577ef8003809c87669e2577463d7c1b1873e0b6300524b1f782687969d83

    • SHA512

      6b7c545aefb536f14f1b020331832045675b70701da2568ef178144116e2e14001231384cab0c610ae98bc7c551fe90c558951fbf21d71634ff1819d044def9d

    • SSDEEP

      3072:fbW/nQcMu/kayTftJ+hTioWDpuOtlYGu7c:fbWH/ka6M4T

    • Stealc

      Stealc is an infostealer written in C++.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks