Overview

overview

10

Static

static

3

random.exe

windows10-2004-x64

10

Resubmissions

17/04/2025, 18:05

250417-wpbbsazjv810

05/04/2025, 13:14

250405-qg3s6szlx97

Sharing

Copy URL Twitter E-mail

General

  • Target
    random.exe
  • Size 2.4MB
  • Sample250417-wpbbsazjv8
  • SHA256 e205646761f59f23d5c8a8483f8a03a313d3b435b302d3a37061840b5cc084c3
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
stealctriumphloadersukaloaderstealertrojan

Malware Config

Extracted

Family

  • stealc

Botnet

  • suka

C2

  • 45.93.20.28

Attributes
  • url_path

    /3d15e67552d448ff.php

rc4.plain

Targets

    • Target
      random.exe
    • Size 2.4MB
    • SHA256 e205646761f59f23d5c8a8483f8a03a313d3b435b302d3a37061840b5cc084c3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    stealctriumphloadersukaloaderstealertrojan

    • Detects TriumphLoader

      Detects TriumphLoader.

    • Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Stealc family

      stealc

    • TriumphLoader

      TriumphLoader is a c++ loader based on the open source AbsentLoader.

      trojanloadertriumphloader

    • Triumphloader family

      triumphloader

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks