Analysis
-
max time kernel
259s -
max time network
261s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
10-10-2024 01:46
General
-
Target
27e4a3627d7df2b22189dd4bebc559ae1986d49a8f4e35980b428fadb66cf23d.exe
-
Size
307KB
-
MD5
791fcee57312d4a20cc86ae1cea8dfc4
-
SHA1
04a88c60ae1539a63411fe4765e9b931e8d2d992
-
SHA256
27e4a3627d7df2b22189dd4bebc559ae1986d49a8f4e35980b428fadb66cf23d
-
SHA512
2771d4e7b272bf770efad22c9fb1dfafe10cbbf009df931f091fb543e3132c0efda16acb5b515452e9e67e8b1fc8fe8aedd1376c236061385f026865cdc28d2c
-
SSDEEP
6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
Score
10/10
Malware Config
Extracted
Family
stealc
Botnet
doma
C2
http://185.215.113.37
Attributes
-
url_path
/e2b1563c6670f193.php
Signatures
-
Stealc
Stealc is an infostealer written in C++.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\27e4a3627d7df2b22189dd4bebc559ae1986d49a8f4e35980b428fadb66cf23d.exe"C:\Users\Admin\AppData\Local\Temp\27e4a3627d7df2b22189dd4bebc559ae1986d49a8f4e35980b428fadb66cf23d.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.4MB
-
Filesize
2.4MB