General

  • Target

    random.exe

  • Size

    2.4MB

  • Sample

    250418-h3flrsymv4

  • MD5

    aa4b50014d5b7d4c764461b5e46226d4

  • SHA1

    a957a9b4a89a82ab4c8dadece805fd1c4069e52d

  • SHA256

    9338622616b0f63c2bd53bba7136e8cae11b79085527a94a10d40007eda46de5

  • SHA512

    34fb7ade7e5a27591f6b9fdacaa71e7cdb81350c9e176c656a45d8cf40c6fe0b6e9087aefb6a367e0870dd321bea4f36721cf8ade82f8e45921c2f935b696292

  • SSDEEP

    49152:HQm1MukvY/AuUBsSOTQGbjvhDMmpwryOWB3FaFX1ZAQhRtIx:w77BJslM2zyGbB3FaVnz

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

suka

C2

45.93.20.28

Attributes
  • url_path

    /3d15e67552d448ff.php

rc4.plain

Targets

    • Target

      random.exe

    • Size

      2.4MB

    • MD5

      aa4b50014d5b7d4c764461b5e46226d4

    • SHA1

      a957a9b4a89a82ab4c8dadece805fd1c4069e52d

    • SHA256

      9338622616b0f63c2bd53bba7136e8cae11b79085527a94a10d40007eda46de5

    • SHA512

      34fb7ade7e5a27591f6b9fdacaa71e7cdb81350c9e176c656a45d8cf40c6fe0b6e9087aefb6a367e0870dd321bea4f36721cf8ade82f8e45921c2f935b696292

    • SSDEEP

      49152:HQm1MukvY/AuUBsSOTQGbjvhDMmpwryOWB3FaFX1ZAQhRtIx:w77BJslM2zyGbB3FaVnz

    Score
    10/10
    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v16

Tasks