Overview

overview

10

Static

static

1

16f1f405be...5c.exe

windows7-x64

10

16f1f405be...5c.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16f1f405be6f22c5b22130ae6ac1c167cd62ce54c01fd9055b274636c994525c.exe

  • Size

    526KB

  • Sample

    250112-y3hzwsxnhw

  • MD5

    329d2bf7d83de88d5b702da53f4e41ec

  • SHA1

    c20d6acbe78efeec8dcf88a6ee53e429016c5bb0

  • SHA256

    16f1f405be6f22c5b22130ae6ac1c167cd62ce54c01fd9055b274636c994525c

  • SHA512

    2b1c91f066e997740134b37ea90259668b6829f5314a1ce72b77cee2747d1d9a873eaa9abd174ecdcb7994e3c49a766ceef1ea51ba6c47d3d10ff1428a9075dc

  • SSDEEP

    12288:9O/YQnxaez5JNiS8J7nrL7kT8ilsVW83tEa:MXnwez5t8JfLM8J9n

Score
10/10
stealcdefaultdiscoverystealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://46.8.231.109

Attributes
  • url_path

    /c4754d4f680ead72.php

Targets

    • Target

      16f1f405be6f22c5b22130ae6ac1c167cd62ce54c01fd9055b274636c994525c.exe

    • Size

      526KB

    • MD5

      329d2bf7d83de88d5b702da53f4e41ec

    • SHA1

      c20d6acbe78efeec8dcf88a6ee53e429016c5bb0

    • SHA256

      16f1f405be6f22c5b22130ae6ac1c167cd62ce54c01fd9055b274636c994525c

    • SHA512

      2b1c91f066e997740134b37ea90259668b6829f5314a1ce72b77cee2747d1d9a873eaa9abd174ecdcb7994e3c49a766ceef1ea51ba6c47d3d10ff1428a9075dc

    • SSDEEP

      12288:9O/YQnxaez5JNiS8J7nrL7kT8ilsVW83tEa:MXnwez5t8JfLM8J9n

    Score
    10/10
    stealcdefaultdiscoverystealer

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Stealc family

      stealc

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks