General

  • Target

    19936742455.zip

  • Size

    38KB

  • Sample

    241118-fgclwayekd

  • MD5

    f75bfa608a853f614030d98162a52324

  • SHA1

    e8bac38f3de58e8c5074c1ccfeca414fdb9f72aa

  • SHA256

    f55bfea21dce60201e1dee43b366eacd3728f38f3678d496de3473b206f64c0a

  • SHA512

    76e3adf95441d5630def4a4eac02a1706020ccd8210ab8b0bccac147c944bec8fcdff718a96759fff3b6738ea66eb8f5bce5b9962738df5d4a19f26b34642c8e

  • SSDEEP

    768:nYfSPSec40wUT2gUodvQ3+vHSIqNVwXpKEI6QIwTAokBdFe8B8m:nYaPRcsY1dvQ3IHSIqNV2t+hK/8m

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://162.0.238.10

Attributes
  • url_path

    /752e382b4dcf5e3f.php

rc4.plain

Targets

    • Target

      77d6f1914af6caf909fa2a246fcec05f500f79dd56e5d0d466d55924695c702d

    • Size

      79KB

    • MD5

      0d049f764a22e16933f8c3f1704d4e50

    • SHA1

      5faad57c7341f76c18ae813e9fa9fbfe434f7b41

    • SHA256

      77d6f1914af6caf909fa2a246fcec05f500f79dd56e5d0d466d55924695c702d

    • SHA512

      a6e2f5e873c76e31cbd4bd1d1e47f59ff93b2c7b9a0be804bccd5fce700377b2ed94cac6f275d6c2efa38b74875e50a11bbe9c9eeca3de09d6d4b7c06c2bc884

    • SSDEEP

      1536:yYsVdxtfVnAo5lg/qrZ7B2QVu0BZFQLtqhG6ha4kUYXKl2WK:yYsPPAo5lg/A/2dYZFQLUG6hTy

MITRE ATT&CK Enterprise v15

Tasks