General

  • Target

    random.exe

  • Size

    2.4MB

  • Sample

    250418-xwbfsssxcs

  • MD5

    d482d7bc73f4825e5e14c70b39811a20

  • SHA1

    812dc8578ba9e9d3572f5c043e0ab83146920ac8

  • SHA256

    4a9c85d70878ac95515200b4864e1671cb4c4dbeba76b914f79ae9e1094ac53a

  • SHA512

    18dbd13aa7921fb5b24b7437d120b338a307476cc0adbc021db43e2634ec38c3881decef97783eb9fc92c3ed2bacae631b3e1f6ca9d24c9b4502d34bddb8c041

  • SSDEEP

    49152:lDN1CgL+XjcZ7VGTtcpKrjgMjE1MD+2kKrUywUt2KBQFvwCTwYC7SCB60vNJ:l7LLZ78tP/gogMD+FKrUywUoKBQhw5Yy

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

suka

C2

45.93.20.28

Attributes
  • url_path

    /3d15e67552d448ff.php

rc4.plain

Targets

    • Target

      random.exe

    • Size

      2.4MB

    • MD5

      d482d7bc73f4825e5e14c70b39811a20

    • SHA1

      812dc8578ba9e9d3572f5c043e0ab83146920ac8

    • SHA256

      4a9c85d70878ac95515200b4864e1671cb4c4dbeba76b914f79ae9e1094ac53a

    • SHA512

      18dbd13aa7921fb5b24b7437d120b338a307476cc0adbc021db43e2634ec38c3881decef97783eb9fc92c3ed2bacae631b3e1f6ca9d24c9b4502d34bddb8c041

    • SSDEEP

      49152:lDN1CgL+XjcZ7VGTtcpKrjgMjE1MD+2kKrUywUt2KBQFvwCTwYC7SCB60vNJ:l7LLZ78tP/gogMD+FKrUywUoKBQhw5Yy

    Score
    10/10
    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v16

Tasks