General

  • Target

    random.exe

  • Size

    2.4MB

  • Sample

    250418-v722satjw9

  • MD5

    e4fefcc047a2faa469afc1c1a38afbe2

  • SHA1

    8e4f43dca053e672b6152f65cea9dd9b5c503092

  • SHA256

    f53fb2bcf45a6bdee770590f96aaef4677cc43f33134c11fa6bb20d72fd94a39

  • SHA512

    fa3a49832999898f189b07dd3e755c9ebd674c573b0acc5fa9b11f9ae6696c728a1b38c43032f1d9f52719d0f206f145f7b4a6ff4f383fea4a33ee19643fedf9

  • SSDEEP

    49152:4cp4hS1C4WTu7VX8cqbJQyRmF1vH3qUL+bOVMW/DJV2gVzywEfn1:ZWy58cqWaIC/bJWrJV2Aen1

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

suka

C2

45.93.20.28

Attributes
  • url_path

    /3d15e67552d448ff.php

rc4.plain

Targets

    • Target

      random.exe

    • Size

      2.4MB

    • MD5

      e4fefcc047a2faa469afc1c1a38afbe2

    • SHA1

      8e4f43dca053e672b6152f65cea9dd9b5c503092

    • SHA256

      f53fb2bcf45a6bdee770590f96aaef4677cc43f33134c11fa6bb20d72fd94a39

    • SHA512

      fa3a49832999898f189b07dd3e755c9ebd674c573b0acc5fa9b11f9ae6696c728a1b38c43032f1d9f52719d0f206f145f7b4a6ff4f383fea4a33ee19643fedf9

    • SSDEEP

      49152:4cp4hS1C4WTu7VX8cqbJQyRmF1vH3qUL+bOVMW/DJV2gVzywEfn1:ZWy58cqWaIC/bJWrJV2Aen1

    Score
    10/10
    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v16

Tasks