Overview

overview

10

Static

static

1

86a95ebe54...27.exe

windows7-x64

10

86a95ebe54...27.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05dc698e49fce4efae5872eb54f19767.bin

  • Size

    4.8MB

  • Sample

    241226-bcztdssqcv

  • MD5

    5d6e9f56e5030b1b44c35283b919e6b0

  • SHA1

    17a400f4b03e64d659af1072e1376dc37c1c8109

  • SHA256

    bf1de8f5e9dc76eae69b3bc9b4c2692b80e02da8329799a109aaa04a827cb6f7

  • SHA512

    e896a441bef93a0c6083a0b912fb6caaf6e6da010ad0c7cff0188fc33dce1a4d242c4083bcd25d306c18441df2a457e1d8330a76787c85cb99ea2ba0596b7672

  • SSDEEP

    98304:I3OX4xWyBgEFsi3Lm4DMJFb2iDVPpclrGKiteJwuuBOghXknranQQOol8V8:4jVsi3OPb1JBcBweJwpOVrSUm

Score
10/10
stealclogsdillerdiscoverystealer

Malware Config

Extracted

Family

stealc

Botnet

LogsDiller

C2

http://185.231.69.191

Attributes
  • url_path

    /f190e2808a5419c3.php

Targets

    • Target

      86a95ebe542d3aed78191cf9bb40d86b7986b338e50941bf7db1ed5008a4e027.exe

    • Size

      5.6MB

    • MD5

      05dc698e49fce4efae5872eb54f19767

    • SHA1

      29cfcfbbb21aefabe7c57a057dcf0335cb4a0ac0

    • SHA256

      86a95ebe542d3aed78191cf9bb40d86b7986b338e50941bf7db1ed5008a4e027

    • SHA512

      85ea0fee917ae5de9c6065ef9a85d3f5cec1c84a31230d81db115006a2d9bb20ba771702b590d4973b75d935d48eee049a7ba35b676796b4a04c3b369e881dc7

    • SSDEEP

      98304:egctTMC3AKW4rNhjVl24OV7cYnBs3vOyCcy42ti0twuXi0doDvXBhG9zHZ:egctTM4AKW4JhjHTOV4YnBs32y042k+v

    Score
    10/10
    stealclogsdillerdiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Stealc family

      stealc

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks