Overview

overview

10

Static

static

3

017e73f683...33.exe

windows7-x64

10

017e73f683...33.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    017e73f6839555aa663a62235a81b433.exe

  • Size

    296KB

  • Sample

    241210-tmxqwszldy

  • MD5

    017e73f6839555aa663a62235a81b433

  • SHA1

    212a9b2425a3b7ea5861dfc8204847bf5872d0be

  • SHA256

    41c2c33823d372f8389b978fdaef60eb6d02aea21bf20b1aad7a11bde5f5dca8

  • SHA512

    c6ec29111019290c60202053674725b6cd978c599843d7e7eeef9482809ec9edbca18b5181b764a9dab2e3c9e5a76f34b8841e1b2fa6ebffa0c52a4588023641

  • SSDEEP

    6144:Ea5OEPJcQ7Tk95eOT0XJaj2L6lqAgLhu:YQHk95eOT0vL0qV

Score
10/10
stealcdefaultdiscoverystealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://92.255.57.89

Attributes
  • url_path

    /45c616e921a794b8.php

Targets

    • Target

      017e73f6839555aa663a62235a81b433.exe

    • Size

      296KB

    • MD5

      017e73f6839555aa663a62235a81b433

    • SHA1

      212a9b2425a3b7ea5861dfc8204847bf5872d0be

    • SHA256

      41c2c33823d372f8389b978fdaef60eb6d02aea21bf20b1aad7a11bde5f5dca8

    • SHA512

      c6ec29111019290c60202053674725b6cd978c599843d7e7eeef9482809ec9edbca18b5181b764a9dab2e3c9e5a76f34b8841e1b2fa6ebffa0c52a4588023641

    • SSDEEP

      6144:Ea5OEPJcQ7Tk95eOT0XJaj2L6lqAgLhu:YQHk95eOT0vL0qV

    Score
    10/10
    stealcdefaultdiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Stealc family

      stealc

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks