Overview

overview

10

Static

static

1

URLScan

urlscan

https://raw.githubus...

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://raw.githubusercontent.com/NecroxisTeam/Necroxis_Executor/main/Necroxis%201.0.zip

  • Sample

    241023-qvjx8asfmh

Score
10/10
stealc6079999470discoverystealer

Malware Config

Extracted

Family

stealc

Botnet

6079999470

C2

http://95.217.125.57

Attributes
  • url_path

    /2f571d994666c8cb.php

Targets

    • Target

      https://raw.githubusercontent.com/NecroxisTeam/Necroxis_Executor/main/Necroxis%201.0.zip

    Score
    10/10
    stealc6079999470discoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks