General

  • Target

    c662be00aaacad366e2b23b11317edac.bin

  • Size

    129KB

  • Sample

    240429-b7rq9sfb5v

  • MD5

    126f1c845fd9eb8e691b0e579401b715

  • SHA1

    ebefcda7531695e54ab4dfdde0b17ad5388729c5

  • SHA256

    a98587fba774b5b7d2a793d27a372e5b931fedfe236a4efb288ef9e344997758

  • SHA512

    9209e98943a3212352b51b7c950662a014efb2fad4082503031d2f36a35335793134d49f50e725fd7b1462bf19d7286c3ef73f19777e54865a8e5b2f60d77675

  • SSDEEP

    1536:Ov626qIrIh/MrclxB1vV0yYUGpRRF059hMExgkv9hEiLavVKjnBLkLuhS+ac0srX:O2m8wLV6UG0ikvki5wOmoJwls8H/kkk

Malware Config

Extracted

Family

stealc

C2

http://185.172.128.62

Attributes
  • url_path

    /902e53a07830e030.php

Targets

    • Target

      8b6af6cb7481b58e76dde6969caf317273d72afed263fdb28f9c34a703c4acb1.exe

    • Size

      203KB

    • MD5

      c662be00aaacad366e2b23b11317edac

    • SHA1

      29c2d6db08fc978e6fee67e5ea7e2fcadaddd847

    • SHA256

      8b6af6cb7481b58e76dde6969caf317273d72afed263fdb28f9c34a703c4acb1

    • SHA512

      501085db6ea486c72fe89dba05fa20e160cf521c3f34e88382290c87b1a8ca0b6bb529d84d817bf8f1375fd34840de120565a9f0693408967f5b05075606cdbb

    • SSDEEP

      3072:dJbapGXkk0/tG1Ay44l6mS9Bgzf9m2k52dg2:dJbaLYHFnKc9m2Xdg

    • Stealc

      Stealc is an infostealer written in C++.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks