General

  • Target

    620-38-0x0000000000410000-0x0000000000AAA000-memory.dmp

  • Size

    6.6MB

  • Sample

    241212-145amayqfy

  • MD5

    f6353231daacf357e04933bc4b1b0ec4

  • SHA1

    5399fd45b26e1dd9f71bccca2632a6a2471082b4

  • SHA256

    486367c826782c79a65be7b4d58815ded125d20daa4c9c859e268f4b7abd2253

  • SHA512

    499b0513223a8a584ae1bebceec5a4f366ea87b8bc12a01cf9a615daf698e8494adf7d40860bc26af9d38e804f9b06969c30f565979afa9360295e6c800494c6

  • SSDEEP

    98304:ZN6p+LeqYujvr7VzLFe6lECoSohi9ngHWh4fw:TjezCoPiZY

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Targets

    • Target

      620-38-0x0000000000410000-0x0000000000AAA000-memory.dmp

    • Size

      6.6MB

    • MD5

      f6353231daacf357e04933bc4b1b0ec4

    • SHA1

      5399fd45b26e1dd9f71bccca2632a6a2471082b4

    • SHA256

      486367c826782c79a65be7b4d58815ded125d20daa4c9c859e268f4b7abd2253

    • SHA512

      499b0513223a8a584ae1bebceec5a4f366ea87b8bc12a01cf9a615daf698e8494adf7d40860bc26af9d38e804f9b06969c30f565979afa9360295e6c800494c6

    • SSDEEP

      98304:ZN6p+LeqYujvr7VzLFe6lECoSohi9ngHWh4fw:TjezCoPiZY

MITRE ATT&CK Enterprise v15

Tasks