General

  • Target

    random.exe

  • Size

    2.4MB

  • Sample

    250419-ngafhst1bs

  • MD5

    ece3bbe260897821714044e8d9521385

  • SHA1

    0f3a831759c5ebb5f4cc433602ffe768b45c22c4

  • SHA256

    b1570494d27c902743cb357b7490c4b9367b4d32f52b0aaa1bdd35ab658b2346

  • SHA512

    c5d5d8ede27976ab69858ef89f65b6a5205d27f80259691d15a38fbf753b3fd8917f83df5d98f725580789155c3124eec36ea5be2d60a2a22241d5156d85f32e

  • SSDEEP

    49152:7zl4cnCLsaikTa1MjliDc+Xk4r4M3g54JDKRt/Ep3iHvB:7CcXa9FkDcBrM3g4JDUJEGv

Score
10/10

Malware Config

Extracted

Family

stealc

Botnet

suka

C2

45.93.20.28

Attributes
  • url_path

    /3d15e67552d448ff.php

rc4.plain

Targets

    • Target

      random.exe

    • Size

      2.4MB

    • MD5

      ece3bbe260897821714044e8d9521385

    • SHA1

      0f3a831759c5ebb5f4cc433602ffe768b45c22c4

    • SHA256

      b1570494d27c902743cb357b7490c4b9367b4d32f52b0aaa1bdd35ab658b2346

    • SHA512

      c5d5d8ede27976ab69858ef89f65b6a5205d27f80259691d15a38fbf753b3fd8917f83df5d98f725580789155c3124eec36ea5be2d60a2a22241d5156d85f32e

    • SSDEEP

      49152:7zl4cnCLsaikTa1MjliDc+Xk4r4M3g54JDKRt/Ep3iHvB:7CcXa9FkDcBrM3g4JDUJEGv

    Score
    10/10
    • Stealc

      Stealc is an infostealer written in C++.

    • Stealc family

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v16

Tasks