Overview

overview

10

Static

static

10

2025-03-30...lc.exe

windows7-x64

10

2025-03-30...lc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-30_5f4b5197059ca68bbca1f5954e245bf5_amadey_mars-stealer_smoke-loader_stealc

  • Size

    2.1MB

  • Sample

    250330-cea4gszm16

  • MD5

    5f4b5197059ca68bbca1f5954e245bf5

  • SHA1

    3300569bb8ec221c39ad07b4aab48ed05c170809

  • SHA256

    2d9c7f173d21c9061c5725e962e98b3214ec0a4c9999cf89e3676173202d1db2

  • SHA512

    df7cb0d28592b5c6b76551024aa1630eb8e5a84a2792254942b4fdc099750f98e6634318d48ff39ff676f802ab057f81665baafeefa3011eac2d752f7343a65c

  • SSDEEP

    3072:xvMLlG8KPgpJSG61doHN4NoQiUukOoymgjOrSGJ8U:xvMhJryZoIohvkOp9OuA8

Score
10/10
stealcdefault6discoverystealer

Malware Config

Extracted

Family

stealc

Botnet

default6

C2

http://185.172.128.210

Attributes
  • url_path

    /f993692117a3fda2.php

Targets

    • Target

      2025-03-30_5f4b5197059ca68bbca1f5954e245bf5_amadey_mars-stealer_smoke-loader_stealc

    • Size

      2.1MB

    • MD5

      5f4b5197059ca68bbca1f5954e245bf5

    • SHA1

      3300569bb8ec221c39ad07b4aab48ed05c170809

    • SHA256

      2d9c7f173d21c9061c5725e962e98b3214ec0a4c9999cf89e3676173202d1db2

    • SHA512

      df7cb0d28592b5c6b76551024aa1630eb8e5a84a2792254942b4fdc099750f98e6634318d48ff39ff676f802ab057f81665baafeefa3011eac2d752f7343a65c

    • SSDEEP

      3072:xvMLlG8KPgpJSG61doHN4NoQiUukOoymgjOrSGJ8U:xvMhJryZoIohvkOp9OuA8

    Score
    10/10
    stealcdefault6discoverystealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks