General

  • Target

    7bfc486e94aacc90fac1037845f79f92f04a0db6fbbab9eaa45c4afe7d0a21fe

  • Size

    695KB

  • Sample

    241120-q63jpsyaqq

  • MD5

    b6f6e51f0efa952f3ffcaab9dd5895db

  • SHA1

    dadb11d90adb38dc798acae755004ed8e93b088f

  • SHA256

    7bfc486e94aacc90fac1037845f79f92f04a0db6fbbab9eaa45c4afe7d0a21fe

  • SHA512

    42f87f1ed44075552d20d96cfec11ff7627d6bd06ef9a3328853cc1fa8375290abc10c692d8059f1516b202b3b8cdadaf84933587e838a229c1d9e0b7fa3ed61

  • SSDEEP

    12288:r9p/R7g6IMdSZCNSSumwQypEun3a8N7yCqrT8O8EntuY9w+f4sij/I+7Nj:r9bqcJNHuNQypEun3aVCqrI6P9w+4jZj

Malware Config

Extracted

Family

stealc

Botnet

LogsDiller

C2

http://45.91.200.39

Attributes
  • url_path

    /eaa194fa594ff9c2.php

Targets

    • Target

      7bfc486e94aacc90fac1037845f79f92f04a0db6fbbab9eaa45c4afe7d0a21fe

    • Size

      695KB

    • MD5

      b6f6e51f0efa952f3ffcaab9dd5895db

    • SHA1

      dadb11d90adb38dc798acae755004ed8e93b088f

    • SHA256

      7bfc486e94aacc90fac1037845f79f92f04a0db6fbbab9eaa45c4afe7d0a21fe

    • SHA512

      42f87f1ed44075552d20d96cfec11ff7627d6bd06ef9a3328853cc1fa8375290abc10c692d8059f1516b202b3b8cdadaf84933587e838a229c1d9e0b7fa3ed61

    • SSDEEP

      12288:r9p/R7g6IMdSZCNSSumwQypEun3a8N7yCqrT8O8EntuY9w+f4sij/I+7Nj:r9bqcJNHuNQypEun3aVCqrI6P9w+4jZj

    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks