General

  • Target

    52ce96aeb7d4062ffcce2a92bd41012f4198bc8d1fe7242b3de84434c6eb4c84

  • Size

    695KB

  • Sample

    241120-q6c9taxpez

  • MD5

    5b198b1cb3177bc50c15f147238d6c49

  • SHA1

    1f5ea6645a41198e7d060fa147b98aabf14600d1

  • SHA256

    52ce96aeb7d4062ffcce2a92bd41012f4198bc8d1fe7242b3de84434c6eb4c84

  • SHA512

    0861e593229b0e953c90a4738b3583ec5a886b9d1aafe1cff75c229d8a85f20dee0ee1c0ab7e2e76ea3e48fa37885edc334d32353165c89f8a27bd2314e6f9bf

  • SSDEEP

    12288:ixOfAaHzlTRfS5fGVQyFVTt2vfrSaxbYesQrRxDYodpu1aWRnzL0KhHhdGRIBtPY:s05HzlTNSpG9VTtafejRQxnurkans6cl

Malware Config

Extracted

Family

stealc

Botnet

LogsDiller

C2

http://77.83.175.105

Attributes
  • url_path

    /18a9a962225b1ffb.php

Targets

    • Target

      52ce96aeb7d4062ffcce2a92bd41012f4198bc8d1fe7242b3de84434c6eb4c84

    • Size

      695KB

    • MD5

      5b198b1cb3177bc50c15f147238d6c49

    • SHA1

      1f5ea6645a41198e7d060fa147b98aabf14600d1

    • SHA256

      52ce96aeb7d4062ffcce2a92bd41012f4198bc8d1fe7242b3de84434c6eb4c84

    • SHA512

      0861e593229b0e953c90a4738b3583ec5a886b9d1aafe1cff75c229d8a85f20dee0ee1c0ab7e2e76ea3e48fa37885edc334d32353165c89f8a27bd2314e6f9bf

    • SSDEEP

      12288:ixOfAaHzlTRfS5fGVQyFVTt2vfrSaxbYesQrRxDYodpu1aWRnzL0KhHhdGRIBtPY:s05HzlTNSpG9VTtafejRQxnurkans6cl

    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks