Overview

overview

10

Static

static

3

343dsxs.exe

windows7-x64

3

343dsxs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    343dsxs.exe

  • Size

    413KB

  • Sample

    241218-mpyyeavqct

  • MD5

    7b0a50d5495209fa15500df08a56428f

  • SHA1

    ab792139aaa0344213aa558e53fa056d5923b8f0

  • SHA256

    d7f591f60eea358649cd97b73296b31a682e22fc5784df440026c3086de3d835

  • SHA512

    c1fe0cb875124c9069f01fc3ef44d864ec82cfad49ee733edecd8b9b5e021594937362641aa33d865aa8a3ec376e46162c988906b0cb7bd0666e873988fe3661

  • SSDEEP

    12288:uXUNyeOg3fUJlIWBdKmkUNsoFjbMd+g4Gq:uXUUeZsICQm51jbMdxlq

Score
10/10
stealcqll2discoverystealer

Malware Config

Extracted

Family

stealc

Botnet

QLL2

C2

http://85.28.47.70

Attributes
  • url_path

    /744f169d372be841.php

Targets

    • Target

      343dsxs.exe

    • Size

      413KB

    • MD5

      7b0a50d5495209fa15500df08a56428f

    • SHA1

      ab792139aaa0344213aa558e53fa056d5923b8f0

    • SHA256

      d7f591f60eea358649cd97b73296b31a682e22fc5784df440026c3086de3d835

    • SHA512

      c1fe0cb875124c9069f01fc3ef44d864ec82cfad49ee733edecd8b9b5e021594937362641aa33d865aa8a3ec376e46162c988906b0cb7bd0666e873988fe3661

    • SSDEEP

      12288:uXUNyeOg3fUJlIWBdKmkUNsoFjbMd+g4Gq:uXUUeZsICQm51jbMdxlq

    Score
    10/10
    discoverystealcqll2stealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Stealc family

      stealc

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks