Overview

overview

10

Static

static

10

696969.exe

windows7-x64

6

696969.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    696969.exe

  • Size

    240KB

  • Sample

    250117-ty2tzswlbt

  • MD5

    89ad45b4a0e2d547c1e09d0a1ea94df6

  • SHA1

    ca32c2e492bb6d0753aab59993380db79b080740

  • SHA256

    18f4e82898557ba7f23f5b58e181793aee6b9ee066258ce0b8fdba63a714c4f8

  • SHA512

    22c575d47780046d845e0c383bf02aded47d2813173ea6f07180f8726be42084336ef5009c34c5c8295d0deddb3f19f6e5fee1902d62ac9499a117e7de59c4ff

  • SSDEEP

    3072:skv0eu6ZJlctXwLISyqlsxfKPkAck1gD1l567pGDUJ42pUvp85lmv6RReHeP3Kqc:/MeNRFLIu5ckeHgFGD+jpUvwzzeot+

Score
10/10
stealcvalencigadiscovery

Malware Config

Extracted

Family

stealc

Botnet

valenciga

C2

http://135.181.65.216

Attributes
  • url_path

    /ee45b7c5e4cb75cb.php

Targets

    • Target

      696969.exe

    • Size

      240KB

    • MD5

      89ad45b4a0e2d547c1e09d0a1ea94df6

    • SHA1

      ca32c2e492bb6d0753aab59993380db79b080740

    • SHA256

      18f4e82898557ba7f23f5b58e181793aee6b9ee066258ce0b8fdba63a714c4f8

    • SHA512

      22c575d47780046d845e0c383bf02aded47d2813173ea6f07180f8726be42084336ef5009c34c5c8295d0deddb3f19f6e5fee1902d62ac9499a117e7de59c4ff

    • SSDEEP

      3072:skv0eu6ZJlctXwLISyqlsxfKPkAck1gD1l567pGDUJ42pUvp85lmv6RReHeP3Kqc:/MeNRFLIu5ckeHgFGD+jpUvwzzeot+

    Score
    6/10
    discovery

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks