General

  • Target

    b2aee2426ab6d5c9574722e9c9d94763b01575034c3598ac4eda0081e37c1535

  • Size

    310KB

  • Sample

    241121-x2c7kszkhq

  • MD5

    a5b5edeb244f57ef81370e848d39e2f8

  • SHA1

    f88e436fd8adcff1ec94cc8869b133973a1ef3c8

  • SHA256

    b2aee2426ab6d5c9574722e9c9d94763b01575034c3598ac4eda0081e37c1535

  • SHA512

    e0f100db2e0a0b3d568ee2da04a735d6fb7ed88585ab75f4aa481a0208bc21c57d7417e6524a54aed9295595fa01d43ad8d64364f6af86b04dcefcc9e4bc96c6

  • SSDEEP

    3072:QK4m9+IFHzTQe4WyLHer+KrHcLpYp6vOp13/x35pqIDp:QKz9+IFHJ4Fer+uqPOb3J

Malware Config

Extracted

Family

stealc

Botnet

default8

C2

http://185.172.128.26

Attributes
  • url_path

    /f993692117a3fda2.php

Targets

    • Target

      b2aee2426ab6d5c9574722e9c9d94763b01575034c3598ac4eda0081e37c1535

    • Size

      310KB

    • MD5

      a5b5edeb244f57ef81370e848d39e2f8

    • SHA1

      f88e436fd8adcff1ec94cc8869b133973a1ef3c8

    • SHA256

      b2aee2426ab6d5c9574722e9c9d94763b01575034c3598ac4eda0081e37c1535

    • SHA512

      e0f100db2e0a0b3d568ee2da04a735d6fb7ed88585ab75f4aa481a0208bc21c57d7417e6524a54aed9295595fa01d43ad8d64364f6af86b04dcefcc9e4bc96c6

    • SSDEEP

      3072:QK4m9+IFHzTQe4WyLHer+KrHcLpYp6vOp13/x35pqIDp:QKz9+IFHJ4Fer+uqPOb3J

MITRE ATT&CK Enterprise v15

Tasks