General

  • Target

    3044-125-0x0000000001300000-0x0000000001999000-memory.dmp

  • Size

    6.6MB

  • Sample

    241119-td44lsxpcw

  • MD5

    12307602d2415edcda9bc609f96c8faa

  • SHA1

    f3fa52a0ade968a660ca104671429425feb3bba0

  • SHA256

    b56847e5b905198b7be62f2bed04e727ca7eae3364376871eef888f25aadcef1

  • SHA512

    1d4ecf487c01228433a751fd19405c5d77ecd62b612a112c07394d9b9ed0bf02fc873af3147f0b2ef78850a9dbc02e1d0b49f2ce0bc38cfd5dba3344269824a6

  • SSDEEP

    98304:9ols8gYTTgyuQK8/BiIYfjlYSeOsJbw5:783wXHpIYZPi0

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Targets

    • Target

      3044-125-0x0000000001300000-0x0000000001999000-memory.dmp

    • Size

      6.6MB

    • MD5

      12307602d2415edcda9bc609f96c8faa

    • SHA1

      f3fa52a0ade968a660ca104671429425feb3bba0

    • SHA256

      b56847e5b905198b7be62f2bed04e727ca7eae3364376871eef888f25aadcef1

    • SHA512

      1d4ecf487c01228433a751fd19405c5d77ecd62b612a112c07394d9b9ed0bf02fc873af3147f0b2ef78850a9dbc02e1d0b49f2ce0bc38cfd5dba3344269824a6

    • SSDEEP

      98304:9ols8gYTTgyuQK8/BiIYfjlYSeOsJbw5:783wXHpIYZPi0

MITRE ATT&CK Enterprise v15

Tasks