Overview

overview

10

Static

static

3

5a45cfe0b2...32.exe

windows7-x64

10

5a45cfe0b2...32.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    5a45cfe0b266362b482cace7205c2c32.exe
  • Size 403KB
  • Sample241126-1mlrys1nbw
  • SHA256 a0e267be6b982f374175ffc83be37b3fcf351cbd1e9ee899d02fb7c722c55c7b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
stealc551488411discoverystealer

Malware Config

Extracted

Family

  • stealc

Botnet

  • 551488411

C2

  • http://92.255.57.88

Attributes
  • url_path

    /7bbacc20a3bd2eb5.php

Targets

    • Target
      5a45cfe0b266362b482cace7205c2c32.exe
    • Size 403KB
    • SHA256 a0e267be6b982f374175ffc83be37b3fcf351cbd1e9ee899d02fb7c722c55c7b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    stealc551488411discoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Stealc family

      stealc

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks