Overview

overview

10

Static

static

3

176ee771c3...da.exe

windows7-x64

10

176ee771c3...da.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    176ee771c395dc6748a4c973a15d53a5d68b9704989349a862714e4bdc0f9fda

  • Size

    297KB

  • Sample

    241212-m59d3stpgn

  • MD5

    9d773e345dca0487c5654a92e6340baa

  • SHA1

    6db3a6b22e452ff6ba55bb28d78dca1ea0fdea6a

  • SHA256

    176ee771c395dc6748a4c973a15d53a5d68b9704989349a862714e4bdc0f9fda

  • SHA512

    a8d94374d51141fd9654e960e6b1f28fc10ace788bee77db1efe01aa1a3020cb7f53230238b832be1ebadfa73076ac51157d1c18175abee0fe66566a3d6786ac

  • SSDEEP

    3072:nkCrb2hNwf/fDwvofR3pQ0dZSzK3i1QPlvtfABAmffbj7AKzxSQ9Ra+pSzuZ:kCv2hNSf7ZzdZSG3i1KllImmff/txjo

Score
10/10
stealcdefaultdiscoverystealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://92.255.57.89

Attributes
  • url_path

    /45c616e921a794b8.php

Targets

    • Target

      176ee771c395dc6748a4c973a15d53a5d68b9704989349a862714e4bdc0f9fda

    • Size

      297KB

    • MD5

      9d773e345dca0487c5654a92e6340baa

    • SHA1

      6db3a6b22e452ff6ba55bb28d78dca1ea0fdea6a

    • SHA256

      176ee771c395dc6748a4c973a15d53a5d68b9704989349a862714e4bdc0f9fda

    • SHA512

      a8d94374d51141fd9654e960e6b1f28fc10ace788bee77db1efe01aa1a3020cb7f53230238b832be1ebadfa73076ac51157d1c18175abee0fe66566a3d6786ac

    • SSDEEP

      3072:nkCrb2hNwf/fDwvofR3pQ0dZSzK3i1QPlvtfABAmffbj7AKzxSQ9Ra+pSzuZ:kCv2hNSf7ZzdZSG3i1KllImmff/txjo

    Score
    10/10
    stealcdefaultdiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Stealc family

      stealc

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks