General

  • Target

    random.exe

  • Size

    2.4MB

  • Sample

    250418-v9wb1stj14

  • MD5

    d32313cbc093db03436757df4cf4500a

  • SHA1

    76ccdb5734478b173789b74a71a31ad724e55a38

  • SHA256

    18aa2dac8f5e09b8a800bf9e00bbeff70b52b0d23f362f6b4ebf3e670da88b38

  • SHA512

    30d167bbe8f4b0ac90dfbc1c6d7f053715cf5bf20993d8b54550d1e9a7ba79383ac2ec8f9cbfbd0384b6d009d0128ffb135519aa5a9e19dd78e3321404c84a4a

  • SSDEEP

    49152:nA4cnR3WSZ0lLS0wnuZtYUDzd3M/5L5S/vExNosdVY7cPtYN0p8a:7c5WS2pHHYjS/cLosTx80pN

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

suka

C2

45.93.20.28

Attributes
  • url_path

    /3d15e67552d448ff.php

rc4.plain

Targets

    • Target

      random.exe

    • Size

      2.4MB

    • MD5

      d32313cbc093db03436757df4cf4500a

    • SHA1

      76ccdb5734478b173789b74a71a31ad724e55a38

    • SHA256

      18aa2dac8f5e09b8a800bf9e00bbeff70b52b0d23f362f6b4ebf3e670da88b38

    • SHA512

      30d167bbe8f4b0ac90dfbc1c6d7f053715cf5bf20993d8b54550d1e9a7ba79383ac2ec8f9cbfbd0384b6d009d0128ffb135519aa5a9e19dd78e3321404c84a4a

    • SSDEEP

      49152:nA4cnR3WSZ0lLS0wnuZtYUDzd3M/5L5S/vExNosdVY7cPtYN0p8a:7c5WS2pHHYjS/cLosTx80pN

    Score
    10/10
    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v16

Tasks