Overview

overview

10

Static

static

3

Setup.exe

windows7-x64

10

Setup.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup.exe

  • Size

    4.8MB

  • Sample

    250103-3ewcjaypdy

  • MD5

    52cfd6dbedabd7f809a047e362c751da

  • SHA1

    d00d0915c2a751e4ceab01d614f7c8508fcae911

  • SHA256

    ce6c62ad7c5152f3040326bf6bfe1f0cd1b55dc87206c9ece0170353ed12ce25

  • SHA512

    e84d4fd08eb4137735e6ede9d0aac1f039b21d0bfd924cc063720befdc50ab4b884804f22c775dc3c259c1f21e8d6aba0ff64c02efc9589b9ce9306958b2d1c6

  • SSDEEP

    98304:QIvAtnTMOZK6LTZdy13tpcyl7UHM2gmHBFciu:9AtTMOZLdyeMecD

Score
10/10
stealcdefaultdiscoverystealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://185.161.248.78

Attributes
  • url_path

    /5115dfcd1c0a61cc.php

rc4.plain

Targets

    • Target

      Setup.exe

    • Size

      4.8MB

    • MD5

      52cfd6dbedabd7f809a047e362c751da

    • SHA1

      d00d0915c2a751e4ceab01d614f7c8508fcae911

    • SHA256

      ce6c62ad7c5152f3040326bf6bfe1f0cd1b55dc87206c9ece0170353ed12ce25

    • SHA512

      e84d4fd08eb4137735e6ede9d0aac1f039b21d0bfd924cc063720befdc50ab4b884804f22c775dc3c259c1f21e8d6aba0ff64c02efc9589b9ce9306958b2d1c6

    • SSDEEP

      98304:QIvAtnTMOZK6LTZdy13tpcyl7UHM2gmHBFciu:9AtTMOZLdyeMecD

    Score
    10/10
    stealcdefaultdiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Stealc family

      stealc

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks