General

  • Target

    444-268-0x0000000000040000-0x00000000006D4000-memory.dmp

  • Size

    6.6MB

  • Sample

    241210-vq2ppawlfp

  • MD5

    bd799dfaa1029b460d2526848472a021

  • SHA1

    2f786d47a0e6147d20cac4bb25c314773eddca51

  • SHA256

    bf03d7229d83550123111acffaeaf2b71acc3681605e827a2700ac380aa33fd0

  • SHA512

    fe2f65291fe1196dd6274183f44196ba52a7571809242c13888b1320e15b107610444ec02afeabc2e49e84136aee9386390dcb3ba8bc40d1ca85a9a08a9024a0

  • SSDEEP

    98304:+sI2Ww0Y3G8qB4h8x6HyoQRW1Gc3ZasPe6oO3:+ZOh8xn/RW1GcJLG69

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Targets

    • Target

      444-268-0x0000000000040000-0x00000000006D4000-memory.dmp

    • Size

      6.6MB

    • MD5

      bd799dfaa1029b460d2526848472a021

    • SHA1

      2f786d47a0e6147d20cac4bb25c314773eddca51

    • SHA256

      bf03d7229d83550123111acffaeaf2b71acc3681605e827a2700ac380aa33fd0

    • SHA512

      fe2f65291fe1196dd6274183f44196ba52a7571809242c13888b1320e15b107610444ec02afeabc2e49e84136aee9386390dcb3ba8bc40d1ca85a9a08a9024a0

    • SSDEEP

      98304:+sI2Ww0Y3G8qB4h8x6HyoQRW1Gc3ZasPe6oO3:+ZOh8xn/RW1GcJLG69

MITRE ATT&CK Enterprise v15

Tasks