General

  • Target

    7a1c5b88f8ac5869e4316a6ee3d43ef0.bin

  • Size

    4.7MB

  • Sample

    241224-btgn5sxpfv

  • MD5

    c3805c99e4012a71be0f811a8c38220f

  • SHA1

    d2c7cb3ba9ef69ccac4cea76b0549ebea96c8583

  • SHA256

    7330cc6b6c67e51ba20cfcf3c5bcf2f03d28db80f12fb47234563cead04bcda9

  • SHA512

    2a924eb0a1cfa2aef6468ea488a49aa2b10b5135dc9e1bc5442c511363e4a2a9c83dc2a71f6f428f5e5b727ff071e80abf3db90bedd2aedd3a5296734fdbf53a

  • SSDEEP

    98304:muKCQNEJyWckyRtnViuqJI17eiX7iO3q1FJ2n:muKCQNYclFis1aOaw

Malware Config

Extracted

Family

stealc

Botnet

LogsDiller

C2

http://185.219.81.132

Attributes
  • url_path

    /4bcb97a14f2e1544.php

Targets

    • Target

      f2ec88ec0b02c5c1dd3dcbb26cae45d73a228fc9fa30c48894c352e1b3a2a417.exe

    • Size

      5.5MB

    • MD5

      7a1c5b88f8ac5869e4316a6ee3d43ef0

    • SHA1

      a685641eb078fe6749e8613791dc4bbd6cd3ae75

    • SHA256

      f2ec88ec0b02c5c1dd3dcbb26cae45d73a228fc9fa30c48894c352e1b3a2a417

    • SHA512

      28a9d975e445fe333642dfa0bb318aa877c817b9f26cdaf55a205a82ecd44db98a607b86447332c7217c75fb1337606b159444a1144c5f7f309e242296adb5d7

    • SSDEEP

      98304:FzNnWb6RA70SkwVKHFluzQuB3qvppsJC/NiGSqR6jl0ARelQ/3fiYKWpXfhEvK5E:PWurFloQy3ypprF/e0Hly3gWdpEvE3+/

    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks