Overview

overview

10

Static

static

3

72c4060327...45.exe

windows7-x64

10

72c4060327...45.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72c40603279789c395054781be9ae0b153ca29ebe3c2f9ff0cb609a603b5c545.exe

  • Size

    909KB

  • Sample

    241002-bqvrlazenj

  • MD5

    5e55a47b6d7053f9d1ff19539863b8c2

  • SHA1

    0fc816248d3ee7605237b1c216dd95333f9edc44

  • SHA256

    72c40603279789c395054781be9ae0b153ca29ebe3c2f9ff0cb609a603b5c545

  • SHA512

    53665b9d764a454aa5ed9f0037a4c36df169ee0fa2caf328b7b559c97006f8818cb33cdeb488333e37c266be041b8fcd4dc4aa683e69472d9c0e00850ad1807d

  • SSDEEP

    12288:ECXVJY0G8ReIqcEV/cjrk/BO27mOCNcnjaEpEEt/xOJUnjz/j/aP3hLnqZ:Eys07eFv1/4PwG/C5OKnjz/zwlnqZ

Score
10/10
stealcdiscoverystealer

Malware Config

Targets

    • Target

      72c40603279789c395054781be9ae0b153ca29ebe3c2f9ff0cb609a603b5c545.exe

    • Size

      909KB

    • MD5

      5e55a47b6d7053f9d1ff19539863b8c2

    • SHA1

      0fc816248d3ee7605237b1c216dd95333f9edc44

    • SHA256

      72c40603279789c395054781be9ae0b153ca29ebe3c2f9ff0cb609a603b5c545

    • SHA512

      53665b9d764a454aa5ed9f0037a4c36df169ee0fa2caf328b7b559c97006f8818cb33cdeb488333e37c266be041b8fcd4dc4aa683e69472d9c0e00850ad1807d

    • SSDEEP

      12288:ECXVJY0G8ReIqcEV/cjrk/BO27mOCNcnjaEpEEt/xOJUnjz/j/aP3hLnqZ:Eys07eFv1/4PwG/C5OKnjz/zwlnqZ

    Score
    10/10
    stealcdiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates processes with tasklist

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks