General

  • Target

    1172-47-0x0000000000500000-0x0000000000A12000-memory.dmp

  • Size

    5.1MB

  • Sample

    241227-k27d7stlh1

  • MD5

    a9b290cca8ba88e6f6430f7f0ba27ce7

  • SHA1

    5d1356f36ff681b03dd2347d3daef3ac98592044

  • SHA256

    f56dca22831d1451e9dd1b9a7736e230929564c7dabac8115ebef91625e3c74b

  • SHA512

    4b6a78e19b811808f3f9429f33732cad447d41a54e2253e9127104ba14ebef49f6b256975c313f36b0c5f61e93522143358d5d39501654c2ee7bcd5d43979a31

  • SSDEEP

    98304:gOrmI6FP4LgJl+y9QV6/NqYMJ6rZPAuj:Wb9QQFqYvZPAuj

Malware Config

Extracted

Family

stealc

Botnet

stok

C2

http://185.215.113.206

Attributes
  • url_path

    /c4becf79229cb002.php

Targets

    • Target

      1172-47-0x0000000000500000-0x0000000000A12000-memory.dmp

    • Size

      5.1MB

    • MD5

      a9b290cca8ba88e6f6430f7f0ba27ce7

    • SHA1

      5d1356f36ff681b03dd2347d3daef3ac98592044

    • SHA256

      f56dca22831d1451e9dd1b9a7736e230929564c7dabac8115ebef91625e3c74b

    • SHA512

      4b6a78e19b811808f3f9429f33732cad447d41a54e2253e9127104ba14ebef49f6b256975c313f36b0c5f61e93522143358d5d39501654c2ee7bcd5d43979a31

    • SSDEEP

      98304:gOrmI6FP4LgJl+y9QV6/NqYMJ6rZPAuj:Wb9QQFqYvZPAuj

MITRE ATT&CK Enterprise v15

Tasks