Overview

overview

10

Static

static

3

d8ce5c1581...39.exe

windows7-x64

10

d8ce5c1581...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8ce5c15818144c17bbb3bf250494439.exe

  • Size

    296KB

  • Sample

    241210-rxmmkaxph1

  • MD5

    d8ce5c15818144c17bbb3bf250494439

  • SHA1

    f2e47e83562b755c8b867983e2633bf799e737fb

  • SHA256

    351b08447b3ac2527ab994604bdd91e43044c962dc26de2ad12f2c46d1eacabd

  • SHA512

    05baef07c671cb86c524c55b7cb5a710c92ca864447e2bf8f4044ad73a1c56c4cbee4d574faf6296b04d4981238a2e0c881de1d316047019ffc7d870bfe650ac

  • SSDEEP

    3072:xF7ZPrB7b0RmL9S9y5FIgaAGw+hpQ443mI8OdsbwFy4lUcyMc4sglLVlR97hgkwg:775ms9S9y5OaGVq4A8O+B4SRMqofhf

Score
10/10
stealcdefaultdiscoverystealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://92.255.57.89

Attributes
  • url_path

    /45c616e921a794b8.php

Targets

    • Target

      d8ce5c15818144c17bbb3bf250494439.exe

    • Size

      296KB

    • MD5

      d8ce5c15818144c17bbb3bf250494439

    • SHA1

      f2e47e83562b755c8b867983e2633bf799e737fb

    • SHA256

      351b08447b3ac2527ab994604bdd91e43044c962dc26de2ad12f2c46d1eacabd

    • SHA512

      05baef07c671cb86c524c55b7cb5a710c92ca864447e2bf8f4044ad73a1c56c4cbee4d574faf6296b04d4981238a2e0c881de1d316047019ffc7d870bfe650ac

    • SSDEEP

      3072:xF7ZPrB7b0RmL9S9y5FIgaAGw+hpQ443mI8OdsbwFy4lUcyMc4sglLVlR97hgkwg:775ms9S9y5OaGVq4A8O+B4SRMqofhf

    Score
    10/10
    stealcdefaultdiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Stealc family

      stealc

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks