General

  • Target
    file.exe
  • Size 1.8MB
  • Sample260624-yk3ataft3m
  • SHA256 1737369bee038e31b39e2cb66b9dd18ecbec92a7be1324adc16060682141f2fd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • stealc

Botnet
  • eu1

C2
  • http://193.148.57.10/88004f4d3e32489389ea.php

Attributes
  • url_path

    /88004f4d3e32489389ea.php

rc4.traffic_key
rc4.plain

Targets

    • Target
      file.exe
    • Size 1.8MB
    • SHA256 1737369bee038e31b39e2cb66b9dd18ecbec92a7be1324adc16060682141f2fd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: Stealc

      Stealc is an infostealer written in C++.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks