General

  • Target

    2340-268-0x00000000012D0000-0x0000000001971000-memory.dmp

  • Size

    6.6MB

  • Sample

    250225-l9d83atm14

  • MD5

    96854587e1de4991c592a8bf955f1330

  • SHA1

    8770d502549b8814e2677de462e45369b12c38b9

  • SHA256

    e9479138d6155b439485588602da9519388af983735f6fb696f0dcb2efc9ed7a

  • SHA512

    3d685ab774cc38d1cdfe43c0d0ed184d3d78beb0d0a776ed17c119425c2f718bb53caf37d027c98cd963159d68842481eaf940e3228a8f77a953115bd8a2a35c

  • SSDEEP

    98304:yFyg3NRPCeKBel9Qu/J6xxf6teFbZKL45t3g6ilq6Xn:YQuoxxf6YZeUg6i06

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://ecozessentials.com

Attributes
  • url_path

    /e6cb1c8fc7cd1659.php

Targets

    • Target

      2340-268-0x00000000012D0000-0x0000000001971000-memory.dmp

    • Size

      6.6MB

    • MD5

      96854587e1de4991c592a8bf955f1330

    • SHA1

      8770d502549b8814e2677de462e45369b12c38b9

    • SHA256

      e9479138d6155b439485588602da9519388af983735f6fb696f0dcb2efc9ed7a

    • SHA512

      3d685ab774cc38d1cdfe43c0d0ed184d3d78beb0d0a776ed17c119425c2f718bb53caf37d027c98cd963159d68842481eaf940e3228a8f77a953115bd8a2a35c

    • SSDEEP

      98304:yFyg3NRPCeKBel9Qu/J6xxf6teFbZKL45t3g6ilq6Xn:YQuoxxf6YZeUg6i06

MITRE ATT&CK Enterprise v15

Tasks