General

  • Target

    random.exe

  • Size

    2.3MB

  • Sample

    250418-w51ava1xbv

  • MD5

    9b303639e6f9e418ef65ab334b49f2ea

  • SHA1

    0ac9852a9b9232bf3e143943e2366d4c92df16f9

  • SHA256

    7b8589220b16fb95ca14bcd5461c1be47895dfbfa495f0a990749f771b5fb932

  • SHA512

    fec0667893730ad4f42d1dd4213f3be32bec384b0ad1dbe8a66f370a320b3cac6c9fd04c68094825cfe0d22c4609d58c82a28154dc8ceb9919a0f21d794c46a4

  • SSDEEP

    49152:tQm4JdcHViAcpGbiLLAzkqIbEsv1rhPnw1E1PohNSdf/0+y4W:WHbccGJkpbFvH1AhkdUu

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

suka

C2

45.93.20.28

Attributes
  • url_path

    /3d15e67552d448ff.php

rc4.plain

Targets

    • Target

      random.exe

    • Size

      2.3MB

    • MD5

      9b303639e6f9e418ef65ab334b49f2ea

    • SHA1

      0ac9852a9b9232bf3e143943e2366d4c92df16f9

    • SHA256

      7b8589220b16fb95ca14bcd5461c1be47895dfbfa495f0a990749f771b5fb932

    • SHA512

      fec0667893730ad4f42d1dd4213f3be32bec384b0ad1dbe8a66f370a320b3cac6c9fd04c68094825cfe0d22c4609d58c82a28154dc8ceb9919a0f21d794c46a4

    • SSDEEP

      49152:tQm4JdcHViAcpGbiLLAzkqIbEsv1rhPnw1E1PohNSdf/0+y4W:WHbccGJkpbFvH1AhkdUu

    Score
    10/10
    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v16

Tasks