stealc | b2aee2426ab6d5c9574722e9c9d94763b01575034c3598ac4eda0081e37c1535 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
21-11-2024 19:20

Sharing

Report Analysis Logs

General

Target

b2aee2426ab6d5c9574722e9c9d94763b01575034c3598ac4eda0081e37c1535.exe
Size

310KB
MD5

a5b5edeb244f57ef81370e848d39e2f8
SHA1

f88e436fd8adcff1ec94cc8869b133973a1ef3c8
SHA256

b2aee2426ab6d5c9574722e9c9d94763b01575034c3598ac4eda0081e37c1535
SHA512

e0f100db2e0a0b3d568ee2da04a735d6fb7ed88585ab75f4aa481a0208bc21c57d7417e6524a54aed9295595fa01d43ad8d64364f6af86b04dcefcc9e4bc96c6
SSDEEP

3072:QK4m9+IFHzTQe4WyLHer+KrHcLpYp6vOp13/x35pqIDp:QKz9+IFHJ4Fer+uqPOb3J

Score

10^/10

stealc default8 stealer

Malware Config

Extracted

Family

stealc

Botnet

default8

C2

http://185.172.128.26

Attributes

url_path
/f993692117a3fda2.php

Signatures

Stealc
Stealc is an infostealer written in C++.
stealer stealc
Stealc family
stealc

C:\Users\Admin\AppData\Local\Temp\b2aee2426ab6d5c9574722e9c9d94763b01575034c3598ac4eda0081e37c1535.exe
"C:\Users\Admin\AppData\Local\Temp\b2aee2426ab6d5c9574722e9c9d94763b01575034c3598ac4eda0081e37c1535.exe"
1⤵
PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2012-1-0x0000000000770000-0x0000000000870000-memory.dmp

Filesize
1024KB

Download
memory/2012-2-0x0000000000220000-0x0000000000247000-memory.dmp

Filesize
156KB

Download
memory/2012-5-0x0000000000220000-0x0000000000247000-memory.dmp

Filesize
156KB

Download
memory/2012-3-0x0000000000400000-0x000000000063B000-memory.dmp

Filesize
2.2MB

Download
memory/2012-4-0x0000000000400000-0x000000000063B000-memory.dmp

Filesize
2.2MB

Download
memory/2012-6-0x0000000000400000-0x000000000063B000-memory.dmp

Filesize
2.2MB

Download