General

  • Target

    2241928b2f066bf8f616cc5bd213a5815cede24c95db54142ec0773740d3f5a9

  • Size

    1.1MB

  • Sample

    240722-fplvhszemj

  • MD5

    d8d8ebb02fe5c2147db8864c801580bf

  • SHA1

    2796f987d55fbcb77709ecdce7959e2db6101bec

  • SHA256

    2241928b2f066bf8f616cc5bd213a5815cede24c95db54142ec0773740d3f5a9

  • SHA512

    a6a25b2094de7c069c1af5f54a0e9502ef64dcb79e21d91538991aed71a6f43bbb2e8320c5375d55a8f00baf89c997138c237e3a58349af2cfe556a2ccdac823

  • SSDEEP

    24576:a7kqB/4dN1CY852QEnmrJ9LtyiRsK+NbJikind6/IuM1H:oGLCYKEsLty2+iVd6/IuU

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://85.28.47.31

Attributes
  • url_path

    /5499d72b3a3e55be.php

Targets

    • Target

      2241928b2f066bf8f616cc5bd213a5815cede24c95db54142ec0773740d3f5a9

    • Size

      1.1MB

    • MD5

      d8d8ebb02fe5c2147db8864c801580bf

    • SHA1

      2796f987d55fbcb77709ecdce7959e2db6101bec

    • SHA256

      2241928b2f066bf8f616cc5bd213a5815cede24c95db54142ec0773740d3f5a9

    • SHA512

      a6a25b2094de7c069c1af5f54a0e9502ef64dcb79e21d91538991aed71a6f43bbb2e8320c5375d55a8f00baf89c997138c237e3a58349af2cfe556a2ccdac823

    • SSDEEP

      24576:a7kqB/4dN1CY852QEnmrJ9LtyiRsK+NbJikind6/IuM1H:oGLCYKEsLty2+iVd6/IuU

    Score
    10/10
    • Stealc

      Stealc is an infostealer written in C++.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks