Analysis
-
max time kernel
128s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
12/07/2024, 20:59
General
-
Target
random.exe
-
Size
2.4MB
-
MD5
f7a1094ec901c30a546487c8aa2a3093
-
SHA1
5818379023c31c60cc63df13710b07ea8c791181
-
SHA256
579804532d286ba442de9a9f8b9a20a2d5239eb510558805fa18ec0717182e0f
-
SHA512
ada3d3b87f01ed5db7b0de44f94b128a154113e5ef0fcabf1117ee5250d171d5f74b637a783c71ab5e16c4b7427c089702e63a9080f5661d0d616c5a3c087af5
-
SSDEEP
49152:z7JRjKf3hvcH2lpm74xGmToTzUHf6KEQmbufIJEOoc9z:T+fxEHApmhDTzof6tQmbJEi
Score
10/10
Malware Config
Extracted
Family
stealc
Botnet
jony
C2
http://85.28.47.4
Attributes
-
url_path
/920475a59bac849d.php
Signatures
-
Stealc
Stealc is an infostealer written in C++.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 14 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\random.exe"C:\Users\Admin\AppData\Local\Temp\random.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
11.9MB
-
Filesize
3.8MB
-
Filesize
11.9MB
-
Filesize
11.9MB
-
Filesize
11.9MB
-
Filesize
3.8MB
-
Filesize
11.9MB
-
Filesize
11.9MB
-
Filesize
11.9MB
-
Filesize
11.9MB
-
Filesize
11.9MB
-
Filesize
11.9MB
-
Filesize
11.9MB
-
Filesize
11.9MB
-
Filesize
11.9MB
-
Filesize
11.9MB