General

  • Target

    random.exe

  • Size

    2.4MB

  • Sample

    250418-w5zpba1xaw

  • MD5

    9e8f3cb26f25c3e799f0b90fe78d8422

  • SHA1

    5f95d3551797553570f2c79ee6d3885a938d51af

  • SHA256

    bd934a2faea290adb6062c096144b374b18ce62f684b2a81f924c2511a286db3

  • SHA512

    79124f1f3940c087062490822e8c28cdb1e3c6e670fa6867af05cc0f970d2a0f6805addb090eb7672fd0eaed4b16e3b9085c8981c543e3e7419a6974ba9402f2

  • SSDEEP

    49152:ewL5HBG654XebSeo55ytQPJqVDKE2olZPYN9P4IZ8Rhev06AeScxnNxxx:eUduebSdPSh2orYZYevbScxj

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

suka

C2

45.93.20.28

Attributes
  • url_path

    /3d15e67552d448ff.php

rc4.plain

Targets

    • Target

      random.exe

    • Size

      2.4MB

    • MD5

      9e8f3cb26f25c3e799f0b90fe78d8422

    • SHA1

      5f95d3551797553570f2c79ee6d3885a938d51af

    • SHA256

      bd934a2faea290adb6062c096144b374b18ce62f684b2a81f924c2511a286db3

    • SHA512

      79124f1f3940c087062490822e8c28cdb1e3c6e670fa6867af05cc0f970d2a0f6805addb090eb7672fd0eaed4b16e3b9085c8981c543e3e7419a6974ba9402f2

    • SSDEEP

      49152:ewL5HBG654XebSeo55ytQPJqVDKE2olZPYN9P4IZ8Rhev06AeScxnNxxx:eUduebSdPSh2orYZYevbScxj

    Score
    10/10
    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v16

Tasks