General

  • Target

    81514f872b8b4adc221c5e4468980efb.exe

  • Size

    298KB

  • Sample

    241210-1qgbms1jh1

  • MD5

    81514f872b8b4adc221c5e4468980efb

  • SHA1

    ae76c9b32ce5a4ac547287ae3e5e6ce3cfc8c5ff

  • SHA256

    e41990e00d72a4f9b5331fab7e2c59393333aa30c42bf4ebf80eed1d45bc2e45

  • SHA512

    f204ba282120fd0a803b59c54ea55385c60c033eaf7a9d1460ec49f9fd85ad16cb4346f21b6a5846e81ef59ca0b52c7fe0f12e7b7228539940c4ffaad54a609d

  • SSDEEP

    3072:ZmhJSA2Mb43leZVyR1/ZrnhRZul55W/53Zxy++e251Q/Yfcmo9QAo+HnR+9CEBCg:chJSAXM3lLL/ZrhRAlX8ApL1Q/lECW

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://92.255.57.89

Attributes
  • url_path

    /45c616e921a794b8.php

Targets

    • Target

      81514f872b8b4adc221c5e4468980efb.exe

    • Size

      298KB

    • MD5

      81514f872b8b4adc221c5e4468980efb

    • SHA1

      ae76c9b32ce5a4ac547287ae3e5e6ce3cfc8c5ff

    • SHA256

      e41990e00d72a4f9b5331fab7e2c59393333aa30c42bf4ebf80eed1d45bc2e45

    • SHA512

      f204ba282120fd0a803b59c54ea55385c60c033eaf7a9d1460ec49f9fd85ad16cb4346f21b6a5846e81ef59ca0b52c7fe0f12e7b7228539940c4ffaad54a609d

    • SSDEEP

      3072:ZmhJSA2Mb43leZVyR1/ZrnhRZul55W/53Zxy++e251Q/Yfcmo9QAo+HnR+9CEBCg:chJSAXM3lLL/ZrhRAlX8ApL1Q/lECW

    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks