Overview

overview

10

Static

static

1

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    973da06b310b7bc6f50c8f5466eedbf9e39c56243ec40727eacffbe111342bed

  • Size

    206KB

  • Sample

    240818-kwlwbawcjc

  • MD5

    40d76f6a55bd862686d25f19d2f75f67

  • SHA1

    5113be968cedfdfefb54ee5acb1feef391e5f56c

  • SHA256

    973da06b310b7bc6f50c8f5466eedbf9e39c56243ec40727eacffbe111342bed

  • SHA512

    3997c29cf9d57365b2ed37ee9e457e45aedac2298f27cee55605db219c55de7ff10b5ef54b3d5088e6b22ea91d99cd7ef8a118570f45db82d7db9e7ceb18d97b

  • SSDEEP

    6144:SW68yqLLl40mgANlT3aWEF78Fd2LD/NeEO:sqLL9bBrheEO

Score
10/10
stealcnorddiscoverystealer

Malware Config

Extracted

Family

stealc

Botnet

nord

C2

http://185.215.113.100

Attributes
  • url_path

    /e2b1563c6670f193.php

Targets

    • Target

      973da06b310b7bc6f50c8f5466eedbf9e39c56243ec40727eacffbe111342bed

    • Size

      206KB

    • MD5

      40d76f6a55bd862686d25f19d2f75f67

    • SHA1

      5113be968cedfdfefb54ee5acb1feef391e5f56c

    • SHA256

      973da06b310b7bc6f50c8f5466eedbf9e39c56243ec40727eacffbe111342bed

    • SHA512

      3997c29cf9d57365b2ed37ee9e457e45aedac2298f27cee55605db219c55de7ff10b5ef54b3d5088e6b22ea91d99cd7ef8a118570f45db82d7db9e7ceb18d97b

    • SSDEEP

      6144:SW68yqLLl40mgANlT3aWEF78Fd2LD/NeEO:sqLL9bBrheEO

    Score
    10/10
    stealcnorddiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks