General

  • Target
    http://dawnloadonline.com/devastated/intemperate.ZG93bmxvYWR8M0dvTVRObE5ueDhNVFkzTVRJeE9UQTVOM3g4TWpVNE9YeDhLRTBwSUZkdmNtUndjbVZ6Y3lCYldFMU1VbEJESUZZeVhR/isla/QXV0b0NBRAQXV.receivables?grownup
  • Sample260216-s5cm1ab13f

Malware Config

Extracted

Family
  • stealc

Botnet
  • 11111

C2
  • http://217.156.66.135

Attributes
  • url_path

    /4a815a53876a4172.php

rc4.plain
rc4.plain

Targets

MITRE ATT&CK Enterprise v16

Tasks