Analysis
-
max time kernel
17s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
26-07-2024 15:55
General
-
Target
file.exe
-
Size
244KB
-
MD5
8e3c2682f9743107cb2b3a3d15b072f5
-
SHA1
660a9b6ad3f5cd1bd37e04015b25a893de4c5f90
-
SHA256
6322686d71a40e20eca9b41af872049e06aab4439a2d06e607e9620decfec41d
-
SHA512
ca5c2366993fe09cc8f15ed6985f6e2f688ce11f1be6ecdc1a6b2dd40b1a1f505781b03236827cf5264aa836d733a59d98560700c8179da4940748d16079b0fe
-
SSDEEP
3072:QcX/GzJvHQn9+skCBqUySy47R2ssdxMXwBF7F8G6gbLYf7H0FF3ad5:X/AJvHQnEayvvf7F8G/3k0vad
Score
10/10
Malware Config
Extracted
Family
stealc
Botnet
sila
C2
http://85.28.47.31
Attributes
-
url_path
/5499d72b3a3e55be.php
Signatures
-
Stealc
Stealc is an infostealer written in C++.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
2.3MB
-
Filesize
192KB
-
Filesize
2.3MB
-
Filesize
32.3MB