General

  • Target

    9083fdc543677684a52a4117355aaaa8.exe

  • Size

    381KB

  • Sample

    241023-jlyxfszhml

  • MD5

    9083fdc543677684a52a4117355aaaa8

  • SHA1

    4362db9717acb639aee5bb9cf8cd4bfb310f8c41

  • SHA256

    355be923f641f30eed9cfba3adfa5bf0d390590e57c9878de1a7d250b3cc2623

  • SHA512

    3da115ce33013801cd1acb324ae7780349add413d64111b3d44561c0ecc98f93616d737cd4f0db0204486d50d3c1c5fa741ffebc561d46cf7e9ce59ec7639537

  • SSDEEP

    6144:oqAHuXH1/ZuLmcu455CfllzDHXe8NamjZ0qojA4XxJ:gSH1Umcl58Be8RsA4h

Malware Config

Extracted

Family

stealc

Botnet

LogsDiller

C2

http://92.119.114.74

Attributes
  • url_path

    /b5b230daad1e99a0.php

Targets

    • Target

      9083fdc543677684a52a4117355aaaa8.exe

    • Size

      381KB

    • MD5

      9083fdc543677684a52a4117355aaaa8

    • SHA1

      4362db9717acb639aee5bb9cf8cd4bfb310f8c41

    • SHA256

      355be923f641f30eed9cfba3adfa5bf0d390590e57c9878de1a7d250b3cc2623

    • SHA512

      3da115ce33013801cd1acb324ae7780349add413d64111b3d44561c0ecc98f93616d737cd4f0db0204486d50d3c1c5fa741ffebc561d46cf7e9ce59ec7639537

    • SSDEEP

      6144:oqAHuXH1/ZuLmcu455CfllzDHXe8NamjZ0qojA4XxJ:gSH1Umcl58Be8RsA4h

    • Stealc

      Stealc is an infostealer written in C++.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks