Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
22/07/2024, 05:02
General
-
Target
2241928b2f066bf8f616cc5bd213a5815cede24c95db54142ec0773740d3f5a9.exe
-
Size
1.1MB
-
MD5
d8d8ebb02fe5c2147db8864c801580bf
-
SHA1
2796f987d55fbcb77709ecdce7959e2db6101bec
-
SHA256
2241928b2f066bf8f616cc5bd213a5815cede24c95db54142ec0773740d3f5a9
-
SHA512
a6a25b2094de7c069c1af5f54a0e9502ef64dcb79e21d91538991aed71a6f43bbb2e8320c5375d55a8f00baf89c997138c237e3a58349af2cfe556a2ccdac823
-
SSDEEP
24576:a7kqB/4dN1CY852QEnmrJ9LtyiRsK+NbJikind6/IuM1H:oGLCYKEsLty2+iVd6/IuU
Score
10/10
Malware Config
Extracted
Family
stealc
Botnet
default
C2
http://85.28.47.31
Attributes
-
url_path
/5499d72b3a3e55be.php
Signatures
-
Stealc
Stealc is an infostealer written in C++.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2241928b2f066bf8f616cc5bd213a5815cede24c95db54142ec0773740d3f5a9.exe"C:\Users\Admin\AppData\Local\Temp\2241928b2f066bf8f616cc5bd213a5815cede24c95db54142ec0773740d3f5a9.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.6MB
-
Filesize
5.6MB