General

  • Target

    a1d863b117044cc4f859824c5d6dfc04c9d9bd03820c5512cce4af50d39f9bea

  • Size

    695KB

  • Sample

    241121-ldqbfsvphm

  • MD5

    de4eecc31e9cd208de42a4401c368dcd

  • SHA1

    e1990dda0f9e347311519d35a485278a746bcfd3

  • SHA256

    a1d863b117044cc4f859824c5d6dfc04c9d9bd03820c5512cce4af50d39f9bea

  • SHA512

    d6cfbe46675c233f6c60e359fbcc3b1f5dc5e163a70a1de1807a249ca8062244090e0554e7bb24d5f29bbdae642cd66692f17948a78b3d8ddc5f3d624f7a40c7

  • SSDEEP

    12288:wDHNPsYxmnaQz5I3qijZlMqCUfv06LeKPBQ2nocY77n0mRGCHjM6WIS:wFsla+wDRhhLeKPOEo/0mcyjM6WIS

Malware Config

Extracted

Family

stealc

Botnet

LogsDiller1

C2

http://45.88.105.194

Attributes
  • url_path

    /88a55e38bdbf04ae.php

Targets

    • Target

      a1d863b117044cc4f859824c5d6dfc04c9d9bd03820c5512cce4af50d39f9bea

    • Size

      695KB

    • MD5

      de4eecc31e9cd208de42a4401c368dcd

    • SHA1

      e1990dda0f9e347311519d35a485278a746bcfd3

    • SHA256

      a1d863b117044cc4f859824c5d6dfc04c9d9bd03820c5512cce4af50d39f9bea

    • SHA512

      d6cfbe46675c233f6c60e359fbcc3b1f5dc5e163a70a1de1807a249ca8062244090e0554e7bb24d5f29bbdae642cd66692f17948a78b3d8ddc5f3d624f7a40c7

    • SSDEEP

      12288:wDHNPsYxmnaQz5I3qijZlMqCUfv06LeKPBQ2nocY77n0mRGCHjM6WIS:wFsla+wDRhhLeKPOEo/0mcyjM6WIS

    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks