General

  • Target

    3128-46-0x0000000000120000-0x0000000000614000-memory.dmp

  • Size

    5.0MB

  • Sample

    241227-e2re4asjal

  • MD5

    65d2bbe685e68bb7982a1a2a1577ffd3

  • SHA1

    2c0097bce5c3539c71b0e9de9501519727d55399

  • SHA256

    68c61ff7565febeb3d532d63024dc7310a1ca6c41eb28f29abb07fe13cb81abe

  • SHA512

    31d877bbe0e66a520d5b1cae679f5d7211dfbab318bf0dec773d494e9e70740fc8a0f2b0cea6831c18dbcc786acf31f18832dc4a80dd7d6188cfc622ad62bb50

  • SSDEEP

    49152:v2MczhatG4Uys1R4R/pg/CnJ96uRc4rfu0cS+xaBKV:ODlaJs1ROprJsu5rfu0zk

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Targets

    • Target

      3128-46-0x0000000000120000-0x0000000000614000-memory.dmp

    • Size

      5.0MB

    • MD5

      65d2bbe685e68bb7982a1a2a1577ffd3

    • SHA1

      2c0097bce5c3539c71b0e9de9501519727d55399

    • SHA256

      68c61ff7565febeb3d532d63024dc7310a1ca6c41eb28f29abb07fe13cb81abe

    • SHA512

      31d877bbe0e66a520d5b1cae679f5d7211dfbab318bf0dec773d494e9e70740fc8a0f2b0cea6831c18dbcc786acf31f18832dc4a80dd7d6188cfc622ad62bb50

    • SSDEEP

      49152:v2MczhatG4Uys1R4R/pg/CnJ96uRc4rfu0cS+xaBKV:ODlaJs1ROprJsu5rfu0zk

MITRE ATT&CK Enterprise v15

Tasks