General

  • Target

    082796fccb8ffb566a99ba188cae572eac30f1bf6e11a7bf4e5ebe757bc66c88.exe

  • Size

    240KB

  • Sample

    241224-chzagsymfv

  • MD5

    004431fc72fc1228abf10e298efa0271

  • SHA1

    05195b1a70f078c9116998d7486e672d90e93218

  • SHA256

    082796fccb8ffb566a99ba188cae572eac30f1bf6e11a7bf4e5ebe757bc66c88

  • SHA512

    8e1c87b177cd3cd687760f002fea6851ae34b2543df434ed1db4146a33a684f5a386e4e6d9d76bd14e064dd29fe6cc1cb0407cac10abf0c9cd4513eefcac8335

  • SSDEEP

    3072:sCFW6ZRlcV3K+gqCClq/oPk1U894z1tJS7pmLUMOmjoRWwhSeUReHeP3KqX+n:j1J7+go0U8evIFmLu6kKeot+

Malware Config

Extracted

Family

stealc

Botnet

default

C2

https://135.181.65.216

Attributes
  • url_path

    /ee45b7c5e4cb75cb.php

Targets

    • Target

      082796fccb8ffb566a99ba188cae572eac30f1bf6e11a7bf4e5ebe757bc66c88.exe

    • Size

      240KB

    • MD5

      004431fc72fc1228abf10e298efa0271

    • SHA1

      05195b1a70f078c9116998d7486e672d90e93218

    • SHA256

      082796fccb8ffb566a99ba188cae572eac30f1bf6e11a7bf4e5ebe757bc66c88

    • SHA512

      8e1c87b177cd3cd687760f002fea6851ae34b2543df434ed1db4146a33a684f5a386e4e6d9d76bd14e064dd29fe6cc1cb0407cac10abf0c9cd4513eefcac8335

    • SSDEEP

      3072:sCFW6ZRlcV3K+gqCClq/oPk1U894z1tJS7pmLUMOmjoRWwhSeUReHeP3KqX+n:j1J7+go0U8evIFmLu6kKeot+

    Score
    6/10
    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks