General

  • Target

    1306ea3cd8264b7aae7435dc979da4a8b7619a1977d39769c977bd1384a66be3.exe

  • Size

    414KB

  • Sample

    250123-rwallstqdn

  • MD5

    213e35af11788cf7eea0f832fcd4045a

  • SHA1

    56be45683fbf64c15fc2036b6f0e5f8488218a1a

  • SHA256

    1306ea3cd8264b7aae7435dc979da4a8b7619a1977d39769c977bd1384a66be3

  • SHA512

    3d51ab31b33cdc2766870ba440fcf85a4ef5647c434999bba109da91575365f210210f1d1b712789ff3456843faa429c1d04d9f9338ac28ede6fc72edd1a0c09

  • SSDEEP

    3072:Np5UG/obP7zM3ZFI/AY5WLsCo9DfejgSSaBUGfrJ1Kvd3+uNzwlUbrm5WKsTrMIz:NpBBpFGpzej+VWqlu9PsEIUB61

Malware Config

Extracted

Family

stealc

Botnet

default9_cap

C2

http://62.204.41.177

Attributes
  • url_path

    /edd20096ecef326d.php

Targets

    • Target

      1306ea3cd8264b7aae7435dc979da4a8b7619a1977d39769c977bd1384a66be3.exe

    • Size

      414KB

    • MD5

      213e35af11788cf7eea0f832fcd4045a

    • SHA1

      56be45683fbf64c15fc2036b6f0e5f8488218a1a

    • SHA256

      1306ea3cd8264b7aae7435dc979da4a8b7619a1977d39769c977bd1384a66be3

    • SHA512

      3d51ab31b33cdc2766870ba440fcf85a4ef5647c434999bba109da91575365f210210f1d1b712789ff3456843faa429c1d04d9f9338ac28ede6fc72edd1a0c09

    • SSDEEP

      3072:Np5UG/obP7zM3ZFI/AY5WLsCo9DfejgSSaBUGfrJ1Kvd3+uNzwlUbrm5WKsTrMIz:NpBBpFGpzej+VWqlu9PsEIUB61

MITRE ATT&CK Enterprise v15

Tasks