General

  • Target

    26f98f79bc4395c652a8bdc88d8a72f9.bin

  • Size

    5.4MB

  • Sample

    241221-bgqraaylcx

  • MD5

    d312dc37ca1c88e7d8755edabdc4ce7b

  • SHA1

    b8f00fb689e24a43cc1f1c62a7d7150103272674

  • SHA256

    fdc2461e29d37769c9db56adb6a62c47f08f434cdedad10811794b2c0497979d

  • SHA512

    b5d9bfa85a91c72af9deb3b7d39196e6bfc4aa9c5ecba310a8bab1a33632b09a1bec287122df3c13c1472c83f7e0fcc0ce6bf24bf3698ce485c93034a39ab740

  • SSDEEP

    98304:cjx8X1hTSrQu7wtZcYJtAolGJyqAumPJA872p0T/KjeNKfHZpqB:cjElSrQWwbTAolGJRmPV2U0eiHPa

Malware Config

Extracted

Family

stealc

Botnet

LogsDiller

C2

http://185.219.81.135

Attributes
  • url_path

    /7ea00b0801a6fd7e.php

Targets

    • Target

      8a273e60e8679da5ff71c0b68d94ea5a167e584006b0b7e1762751a509e5038c.exe

    • Size

      5.7MB

    • MD5

      26f98f79bc4395c652a8bdc88d8a72f9

    • SHA1

      a7432b7e962695aa691165f1128843546d6db8b1

    • SHA256

      8a273e60e8679da5ff71c0b68d94ea5a167e584006b0b7e1762751a509e5038c

    • SHA512

      1f567eec2d775f46fb3c25fcb20636392aeccb7ff3ada9491aa90ec0f62d3dde7a84cc6da8ce03b09b095f1ccab6d83bfed0a89b114c6b5840f309a946b809ec

    • SSDEEP

      98304:QrOAQctmvYfl6XQQHEqO6T6ZfrlnVxC7J8s6rCaezlJSBcEjSM:uQctmY6H/OnxcJQm3SBk

    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks