Overview

overview

10

Static

static

3

xrandom.exe

windows10-2004-x64

10

xrandom.exe

windows10-ltsc 2021-x64

10

xrandom.exe

windows11-21h2-x64

10

xrandom.exe

windows7-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    xrandom.exe

  • Size

    1.3MB

  • Sample

    250129-zwk2cayjhp

  • MD5

    2893a3033daf4b014031297ff29d157d

  • SHA1

    a0abe889fc3b0ae8bfdbd0f4f56bc500f56d839f

  • SHA256

    c41b3aeb361912b6e938ace351253dbd79d39ec3a8a8cfabf7e3b498ea1aac39

  • SHA512

    2deaab343e02c898f51e9f3748ff26214f02e6427a9f82033ad5bccdcf6fb9f84cd52ef7659e9958d8b7de0b26e0585eb588bea15f7f259477807c80ac9921a1

  • SSDEEP

    24576:xjYAY3dLBTYhZtsh9M9Z/MnXfCQNfV6HeyhrIuU/zxvuo3A8azMy8R:xYDNTYhZtW9QZUnXqitAEva8azw

Score
10/10
stealcdefaultdiscoverystealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://162.248.227.2

Attributes
  • url_path

    /c978b91b47469f3f.php

Targets

    • Target

      xrandom.exe

    • Size

      1.3MB

    • MD5

      2893a3033daf4b014031297ff29d157d

    • SHA1

      a0abe889fc3b0ae8bfdbd0f4f56bc500f56d839f

    • SHA256

      c41b3aeb361912b6e938ace351253dbd79d39ec3a8a8cfabf7e3b498ea1aac39

    • SHA512

      2deaab343e02c898f51e9f3748ff26214f02e6427a9f82033ad5bccdcf6fb9f84cd52ef7659e9958d8b7de0b26e0585eb588bea15f7f259477807c80ac9921a1

    • SSDEEP

      24576:xjYAY3dLBTYhZtsh9M9Z/MnXfCQNfV6HeyhrIuU/zxvuo3A8azMy8R:xYDNTYhZtW9QZUnXqitAEva8azw

    Score
    10/10
    stealcdefaultdiscoverystealer
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks