General

  • Target

    2860-45-0x0000000000A50000-0x00000000010ED000-memory.dmp

  • Size

    6.6MB

  • Sample

    241122-xh61jswnaz

  • MD5

    aff3973c65b454b5aaaa7d67acf1a7a1

  • SHA1

    4bd3804035670b39e83f5bf6532f29231c9ca28b

  • SHA256

    42c729436ae577e608f966a13f7a2cc4199b183603497e1c790b7e5c6cd9f66e

  • SHA512

    31f3063b23f4af39591579bcc4b6f1227fd75d9de6ad1513d0f8b46b1964c35a1cbcb8697fd23c9cf5fb8639cb7a6c313af9ed4988f91f867d9ac68a7b50c9bb

  • SSDEEP

    98304:2ebVoHk7wtCkTCYF8rP39/bYPuiOTdUeKJtUf1+PuU:hJS8b39/b43OTu1JfmU

Malware Config

Extracted

Family

stealc

Botnet

mars

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Targets

    • Target

      2860-45-0x0000000000A50000-0x00000000010ED000-memory.dmp

    • Size

      6.6MB

    • MD5

      aff3973c65b454b5aaaa7d67acf1a7a1

    • SHA1

      4bd3804035670b39e83f5bf6532f29231c9ca28b

    • SHA256

      42c729436ae577e608f966a13f7a2cc4199b183603497e1c790b7e5c6cd9f66e

    • SHA512

      31f3063b23f4af39591579bcc4b6f1227fd75d9de6ad1513d0f8b46b1964c35a1cbcb8697fd23c9cf5fb8639cb7a6c313af9ed4988f91f867d9ac68a7b50c9bb

    • SSDEEP

      98304:2ebVoHk7wtCkTCYF8rP39/bYPuiOTdUeKJtUf1+PuU:hJS8b39/b43OTu1JfmU

MITRE ATT&CK Enterprise v15

Tasks