General

  • Target

    952-815-0x0000000000FF0000-0x000000000168B000-memory.dmp.exe

  • Size

    6.6MB

  • Sample

    250220-q3h1wswnbn

  • MD5

    b6d71b3a387ec25e0a089027d020f74b

  • SHA1

    0de1d8c10a6d0c79b8bba9fd68513b1e53a8f629

  • SHA256

    9d681414a2268f9654d1703e48c4c6cd2a576c6cfb5a5a65b8c79cb32dd73d2a

  • SHA512

    d35e4e9525ccef8199d80a61751fe817522843a19ca7d3709d831dd5d95db494f441b74aa4d9ae12a640d62ff919ba9785028870acbc4027a3ceb37b74af67ae

  • SSDEEP

    98304:WUWGhCq6V/OxuAWpEwrq1FyeuIAUYdrOZ/VL2LMk:WlsnfuIcdiX2o

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://ecozessentials.com

Attributes
  • url_path

    /e6cb1c8fc7cd1659.php

Targets

    • Target

      952-815-0x0000000000FF0000-0x000000000168B000-memory.dmp.exe

    • Size

      6.6MB

    • MD5

      b6d71b3a387ec25e0a089027d020f74b

    • SHA1

      0de1d8c10a6d0c79b8bba9fd68513b1e53a8f629

    • SHA256

      9d681414a2268f9654d1703e48c4c6cd2a576c6cfb5a5a65b8c79cb32dd73d2a

    • SHA512

      d35e4e9525ccef8199d80a61751fe817522843a19ca7d3709d831dd5d95db494f441b74aa4d9ae12a640d62ff919ba9785028870acbc4027a3ceb37b74af67ae

    • SSDEEP

      98304:WUWGhCq6V/OxuAWpEwrq1FyeuIAUYdrOZ/VL2LMk:WlsnfuIcdiX2o

MITRE ATT&CK Enterprise v15

Tasks