General

  • Target

    7088-2384-0x0000000000D50000-0x00000000013DF000-memory.dmp

  • Size

    6.6MB

  • Sample

    250219-xsfw4syns3

  • MD5

    7d4834749e93adf08e1a844bd022423b

  • SHA1

    32dcfa95aecf7fdf5f8941fc823af8e8bb2216b0

  • SHA256

    f24940e1bedaace86f3fc140e1b970ad709caf8761a923cc6f078d2a3d27a4ac

  • SHA512

    31cd349b8d603c6ba7763ed8ac34b0a20375080a1bcc4a38e18ebd9a2060447aacdc2e68561e2b71f3b17f81aca418cf6da06e2a04b24d7a7e0469ec72c63488

  • SSDEEP

    98304:LEbl7wqKaFjAleSeDbrJ4/kFxcb+kCvS8lp:OpjAyr1Wb+kmS

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://ecozessentials.com

Attributes
  • url_path

    /e6cb1c8fc7cd1659.php

Targets

    • Target

      7088-2384-0x0000000000D50000-0x00000000013DF000-memory.dmp

    • Size

      6.6MB

    • MD5

      7d4834749e93adf08e1a844bd022423b

    • SHA1

      32dcfa95aecf7fdf5f8941fc823af8e8bb2216b0

    • SHA256

      f24940e1bedaace86f3fc140e1b970ad709caf8761a923cc6f078d2a3d27a4ac

    • SHA512

      31cd349b8d603c6ba7763ed8ac34b0a20375080a1bcc4a38e18ebd9a2060447aacdc2e68561e2b71f3b17f81aca418cf6da06e2a04b24d7a7e0469ec72c63488

    • SSDEEP

      98304:LEbl7wqKaFjAleSeDbrJ4/kFxcb+kCvS8lp:OpjAyr1Wb+kmS

MITRE ATT&CK Enterprise v15

Tasks