Overview

overview

10

Static

static

3

_971751254...ba.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    _9717512548e83fa4eb12d4f7db442e8aabbda304293681986699c9a758ef6cba.exe
  • Size 1.8MB
  • Sample260704-s2b73ac19p
  • SHA256 9717512548e83fa4eb12d4f7db442e8aabbda304293681986699c9a758ef6cba
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
stealcsaifstealer

Malware Config

Extracted

Family

  • stealc

Botnet

  • saif

C2

  • http://193.148.56.145/8e469217c34746588eec.php

Attributes
  • url_path

    /8e469217c34746588eec.php

rc4.traffic_key
rc4.plain

Targets

    • Target
      _9717512548e83fa4eb12d4f7db442e8aabbda304293681986699c9a758ef6cba.exe
    • Size 1.8MB
    • SHA256 9717512548e83fa4eb12d4f7db442e8aabbda304293681986699c9a758ef6cba
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    saifstealcstealer

    • Family: Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Matrix

Tasks