General

  • Target
    https://mini-01-s3.vx-underground.org/samples/Builders/VulturiStealer/VulturiStealer%20Builder.a.7z
  • Sample250515-nd22cswses

Malware Config

Extracted

Family
  • vulturi

C2
  • http://panel.com:5050/gate

Attributes
  • c2_encryption_key

    123

  • c2_user

    root

Targets

    • Target
      https://mini-01-s3.vx-underground.org/samples/Builders/VulturiStealer/VulturiStealer%20Builder.a.7z
    • Vulturi

      An info stealer written in C# and first seen in January 2021.

    • Vulturi family

    • Vulturi payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks