Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90816c34dcc2788390c3a3702e94ea9765cf4388b4aad8237ae78d90d7ba16ff

  • Size

    2.5MB

  • Sample

    240807-1r6ypaybkf

  • MD5

    197cdae2ac2f0fcb4e1a34154ab57502

  • SHA1

    a50b7a8d17c95e6cbf5239f9fd05a2e9c5b7e651

  • SHA256

    90816c34dcc2788390c3a3702e94ea9765cf4388b4aad8237ae78d90d7ba16ff

  • SHA512

    9d5483e5f8e238798df5fe1177215e5ad7f4efe45e65cebf7ed7044ff4b885a4af2598d4561bb894a74983ae4a6b0accd732fb74e3657d6aad2eb73a2263975b

  • SSDEEP

    49152:5mMy1rMEZU+OjfYfvFtchdDojuYLTujlDS9/ObVWO9rCWQWlank:5luZnOfYl8ojxXgS0WO9OWQmG

Score
10/10
stealcdefaultdiscoverystealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://185.215.113.24

Attributes
  • url_path

    /e2b1563c6670f193.php

Targets

    • Target

      90816c34dcc2788390c3a3702e94ea9765cf4388b4aad8237ae78d90d7ba16ff

    • Size

      2.5MB

    • MD5

      197cdae2ac2f0fcb4e1a34154ab57502

    • SHA1

      a50b7a8d17c95e6cbf5239f9fd05a2e9c5b7e651

    • SHA256

      90816c34dcc2788390c3a3702e94ea9765cf4388b4aad8237ae78d90d7ba16ff

    • SHA512

      9d5483e5f8e238798df5fe1177215e5ad7f4efe45e65cebf7ed7044ff4b885a4af2598d4561bb894a74983ae4a6b0accd732fb74e3657d6aad2eb73a2263975b

    • SSDEEP

      49152:5mMy1rMEZU+OjfYfvFtchdDojuYLTujlDS9/ObVWO9rCWQWlank:5luZnOfYl8ojxXgS0WO9OWQmG

    Score
    10/10
    stealcdefaultdiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks