General

  • Target

    8a273e60e8679da5ff71c0b68d94ea5a167e584006b0b7e1762751a509e5038c_Sigmanly

  • Size

    5.7MB

  • Sample

    241220-yp1b1sspfw

  • MD5

    26f98f79bc4395c652a8bdc88d8a72f9

  • SHA1

    a7432b7e962695aa691165f1128843546d6db8b1

  • SHA256

    8a273e60e8679da5ff71c0b68d94ea5a167e584006b0b7e1762751a509e5038c

  • SHA512

    1f567eec2d775f46fb3c25fcb20636392aeccb7ff3ada9491aa90ec0f62d3dde7a84cc6da8ce03b09b095f1ccab6d83bfed0a89b114c6b5840f309a946b809ec

  • SSDEEP

    98304:QrOAQctmvYfl6XQQHEqO6T6ZfrlnVxC7J8s6rCaezlJSBcEjSM:uQctmY6H/OnxcJQm3SBk

Malware Config

Extracted

Family

stealc

Botnet

LogsDiller

C2

http://185.219.81.135

Attributes
  • url_path

    /7ea00b0801a6fd7e.php

Targets

    • Target

      8a273e60e8679da5ff71c0b68d94ea5a167e584006b0b7e1762751a509e5038c_Sigmanly

    • Size

      5.7MB

    • MD5

      26f98f79bc4395c652a8bdc88d8a72f9

    • SHA1

      a7432b7e962695aa691165f1128843546d6db8b1

    • SHA256

      8a273e60e8679da5ff71c0b68d94ea5a167e584006b0b7e1762751a509e5038c

    • SHA512

      1f567eec2d775f46fb3c25fcb20636392aeccb7ff3ada9491aa90ec0f62d3dde7a84cc6da8ce03b09b095f1ccab6d83bfed0a89b114c6b5840f309a946b809ec

    • SSDEEP

      98304:QrOAQctmvYfl6XQQHEqO6T6ZfrlnVxC7J8s6rCaezlJSBcEjSM:uQctmY6H/OnxcJQm3SBk

    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks