Overview

overview

10

Static

static

1

swizzzz.exe

windows7-x64

3

swizzzz.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    swizzzz.exe

  • Size

    352KB

  • Sample

    240712-t8r3jatfqe

  • MD5

    a74811b7e2d71612463144c69c0ca7e2

  • SHA1

    900132a2213f70aed06e9982e47cfdcc8964b710

  • SHA256

    3d07b09f83f2fc5dcb7f2429cac9a37160181da77df5a429e37b98dd685f239f

  • SHA512

    c4c5bef04693f000ae1f45d2a2d28f67609f36a635464d5025a50b939eaf9cc8d7766355990847f5679375f3d4b760e035dd92914f754ae64df6923da1cecebe

  • SSDEEP

    6144:IsCv/QNuZNjDPp9XC2Fgd6dwiJLR8ATGb5gBJYgEltzK5d5Sw+tuhdZUui/EO:I/+uZNjDPNGeR85+YgEf25CtuhLi/EO

Score
10/10
stealccuapfssstealer

Malware Config

Extracted

Family

stealc

Botnet

cuapfss

C2

http://23.88.106.134

Attributes
  • url_path

    /6a9f8e2503d99c04.php

Targets

    • Target

      swizzzz.exe

    • Size

      352KB

    • MD5

      a74811b7e2d71612463144c69c0ca7e2

    • SHA1

      900132a2213f70aed06e9982e47cfdcc8964b710

    • SHA256

      3d07b09f83f2fc5dcb7f2429cac9a37160181da77df5a429e37b98dd685f239f

    • SHA512

      c4c5bef04693f000ae1f45d2a2d28f67609f36a635464d5025a50b939eaf9cc8d7766355990847f5679375f3d4b760e035dd92914f754ae64df6923da1cecebe

    • SSDEEP

      6144:IsCv/QNuZNjDPp9XC2Fgd6dwiJLR8ATGb5gBJYgEltzK5d5Sw+tuhdZUui/EO:I/+uZNjDPNGeR85+YgEf25CtuhLi/EO

    Score
    10/10
    stealccuapfssstealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks