stealc | 80216ff5d3f3c4ee838496d49e0b6a0bc1f4f7c521a6eaa737f98d82750e1adf | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
23/01/2025, 17:25

Sharing

Report Analysis Logs

General

Target

CT0Jfj4mtg7kjW_I3UN1M8OM.exe
Size

259KB
MD5

70fe014435ee7d569aa95623c6c7531c
SHA1

82a2f41e4d7f5f2f2daa3a33099893c4c986bd66
SHA256

80216ff5d3f3c4ee838496d49e0b6a0bc1f4f7c521a6eaa737f98d82750e1adf
SHA512

87ec56bd3466b4b6530fa15cb74245f3e9e7e22a4b3aa51faf4550ab73783363ea9bbb2d84d3fd0f48d3ed876d448fd3b1aea6ff799b6c364131e41c466041d2
SSDEEP

3072:txcHdBK/vWvpY8PPhepykCAHHeBz4K+8tCkoKDa2RvFsM+sYMJbm:QP8uv68nhDkLeqK7TNRveMeMJb

Score

10^/10

stealc default stealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://unlikeget.top

Attributes

url_path
/3886d2276f6914c4.php

rc4.plain

Signatures

Stealc
Stealc is an infostealer written in C++.
stealer stealc
Stealc family
stealc

C:\Users\Admin\AppData\Local\Temp\CT0Jfj4mtg7kjW_I3UN1M8OM.exe
"C:\Users\Admin\AppData\Local\Temp\CT0Jfj4mtg7kjW_I3UN1M8OM.exe"
1⤵
PID:1120

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1120-2-0x0000000000400000-0x000000000062D000-memory.dmp

Filesize
2.2MB

Download
memory/1120-1-0x0000000002380000-0x0000000002480000-memory.dmp

Filesize
1024KB

Download
memory/1120-4-0x0000000000400000-0x000000000062D000-memory.dmp

Filesize
2.2MB

Download
memory/1120-5-0x0000000000400000-0x00000000022E8000-memory.dmp

Filesize
30.9MB

Download
memory/1120-3-0x0000000000400000-0x00000000022E8000-memory.dmp

Filesize
30.9MB

Download
memory/1120-6-0x0000000000400000-0x00000000022E8000-memory.dmp

Filesize
30.9MB

Download