Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7e12a4c77fc3b56d0a971f9ec6aad4cf258b0d1ad79933f48d54b05635d5e2a3

  • Size

    251KB

  • Sample

    240801-2nk3gszfnm

  • MD5

    b68e2aa65e55625f6642f8a22257c63b

  • SHA1

    4fc890af9585d369fd169941cab64af1cfac4f89

  • SHA256

    7e12a4c77fc3b56d0a971f9ec6aad4cf258b0d1ad79933f48d54b05635d5e2a3

  • SHA512

    52951129eada7b705b486991cf4375cf15c61990bc5d3f80e69d2a71877d44b0e93a0afeb4742fbcd5e549e67f2c645b6a6c448c02fcb11fb1a699d48be66c2b

  • SSDEEP

    3072:uLCWSJzpVn5jzA8WSfMGz5qW7FEFookf1hdjNoiMrFayrhA4rtF9VLU0TP:NjJzb5jb7UCT7FEFooqjvMEO53jL7

Score
10/10
stealcsiladiscoverystealer

Malware Config

Extracted

Family

stealc

Botnet

sila

C2

http://85.28.47.31

Attributes
  • url_path

    /5499d72b3a3e55be.php

Targets

    • Target

      7e12a4c77fc3b56d0a971f9ec6aad4cf258b0d1ad79933f48d54b05635d5e2a3

    • Size

      251KB

    • MD5

      b68e2aa65e55625f6642f8a22257c63b

    • SHA1

      4fc890af9585d369fd169941cab64af1cfac4f89

    • SHA256

      7e12a4c77fc3b56d0a971f9ec6aad4cf258b0d1ad79933f48d54b05635d5e2a3

    • SHA512

      52951129eada7b705b486991cf4375cf15c61990bc5d3f80e69d2a71877d44b0e93a0afeb4742fbcd5e549e67f2c645b6a6c448c02fcb11fb1a699d48be66c2b

    • SSDEEP

      3072:uLCWSJzpVn5jzA8WSfMGz5qW7FEFookf1hdjNoiMrFayrhA4rtF9VLU0TP:NjJzb5jb7UCT7FEFooqjvMEO53jL7

    Score
    10/10
    stealcsiladiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks