General

  • Target

    2980-403-0x0000000001150000-0x00000000017FA000-memory.dmp

  • Size

    6.7MB

  • Sample

    250329-rpp3qavwht

  • MD5

    5dd8336540ce650148c52ff19843f6ea

  • SHA1

    4c30d8e07a4db77316992a3231c96f37d5593275

  • SHA256

    0c8e0a1c3a045527be58ac1a5f5a1bc9c71220deba4ffe833e9bf74add8510fb

  • SHA512

    4e5cec6e677a48c9a0ad271dd0d63d8e0a3e5eba1fdec42805c3de91987600e90b9690ea189272584d4c55f854f06b0ca07df78dc7cab450c303a7f7a119ccb2

  • SSDEEP

    98304:WAPy2CZa4v3Or2KxKkLLdBMRtDb158o1kyPvu:x29QdBQt3p9vu

Malware Config

Extracted

Family

stealc

Botnet

trump

C2

http://45.93.20.28

Attributes
  • url_path

    /85a1cacf11314eb8.php

Targets

    • Target

      2980-403-0x0000000001150000-0x00000000017FA000-memory.dmp

    • Size

      6.7MB

    • MD5

      5dd8336540ce650148c52ff19843f6ea

    • SHA1

      4c30d8e07a4db77316992a3231c96f37d5593275

    • SHA256

      0c8e0a1c3a045527be58ac1a5f5a1bc9c71220deba4ffe833e9bf74add8510fb

    • SHA512

      4e5cec6e677a48c9a0ad271dd0d63d8e0a3e5eba1fdec42805c3de91987600e90b9690ea189272584d4c55f854f06b0ca07df78dc7cab450c303a7f7a119ccb2

    • SSDEEP

      98304:WAPy2CZa4v3Or2KxKkLLdBMRtDb158o1kyPvu:x29QdBQt3p9vu

MITRE ATT&CK Enterprise v15

Tasks