General

  • Target

    808-3-0x0000000001280000-0x000000000193E000-memory.dmp

  • Size

    6.7MB

  • Sample

    250213-jvfr8swles

  • MD5

    0cb57df628e88c8653ec46e16531d45c

  • SHA1

    e60a3cdbbc6285036a6f538bf02c3e8617532d78

  • SHA256

    dbc144f8feaed96d656d32529eaac35ef5d2013638f3302d2b6532b0d36589b7

  • SHA512

    fb2324cbb827222889734d4f67a3023edde16c1176e030a14f42c4927949b1447604d5ecc842f9873a578f8418a875d622872db129f26a706bf9944998ee8983

  • SSDEEP

    98304:pm/9WaGXeXfDeamEzWfNhVnDDukXYGI0XoyzXI:pm/9oOWlhRDDtbx4

Malware Config

Extracted

Family

stealc

Botnet

reno

C2

http://185.215.113.115

Attributes
  • url_path

    /c4becf79229cb002.php

Targets

    • Target

      808-3-0x0000000001280000-0x000000000193E000-memory.dmp

    • Size

      6.7MB

    • MD5

      0cb57df628e88c8653ec46e16531d45c

    • SHA1

      e60a3cdbbc6285036a6f538bf02c3e8617532d78

    • SHA256

      dbc144f8feaed96d656d32529eaac35ef5d2013638f3302d2b6532b0d36589b7

    • SHA512

      fb2324cbb827222889734d4f67a3023edde16c1176e030a14f42c4927949b1447604d5ecc842f9873a578f8418a875d622872db129f26a706bf9944998ee8983

    • SSDEEP

      98304:pm/9WaGXeXfDeamEzWfNhVnDDukXYGI0XoyzXI:pm/9oOWlhRDDtbx4

    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks