Overview

overview

10

Static

static

3

[email protected]

windows7-x64

1

[email protected]

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    [email protected]

  • Size

    5.0MB

  • Sample

    240810-v155vstepe

  • MD5

    256724445ef377767a4e511283fc46c0

  • SHA1

    c5f93ddec4a64cc8f7c0845213cfd21ee6e5e641

  • SHA256

    81ec2da0cfc770effc138eca1489338e6d623cb133a820c2b34d7dc4cadc0dd1

  • SHA512

    99c46ab44d3942eb876722a59b678e942a1320b407b3c68eabea141f518fd69f332a2b2812810ce17bc5e9a751ff42cb3bb5bb6108b44c0d27850a57d907b89d

  • SSDEEP

    98304:lZDKJo05Dr4cX0ZHJ+xcUOic2aggt4DvEfzpFYe0rS/yGv7pIaC8zXklU/f5Ce:lkJt/4+DxbO2a9KDsfzpRaQO8fn5z

Score
10/10
stealccr7discoverystealer

Malware Config

Extracted

Family

stealc

Botnet

cr7

C2

http://45.152.115.5

Attributes
  • url_path

    /587ec30955d49a9c.php

Targets

    • Target

      [email protected]

    • Size

      738.7MB

    • MD5

      5c16ae0979a5523d952c8e82e70cbc62

    • SHA1

      6fe0d7a1ff8163305afe7034a2303e7e557b10db

    • SHA256

      044fadaf63b3d344324fd637a9e7008689b88796979d97e366522ed455bd93a5

    • SHA512

      12d06dac58b7db8c528c12b9a0cdd1453f0cd73b1119dee8d0d9c5365e7e46a5d3b1431ce1555262d62fb299eb35abe8d373fc470e72e4686018fdbdf2f570e0

    • SSDEEP

      98304:cqMh/T5RVYN3UySOg5IbMFrWRo9fqbZUPFSg72/88EmCORcaSIy17gI5b3xMWn+:cqC/S3PSOg5jjfqbG+/umCOC9hRtFf

    Score
    10/10
    stealccr7discoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks