General

  • Target
    file.exe
  • Size 2.1MB
  • Sample260707-3trb5ags2x
  • SHA256 8b7537c6624998423c0dc5e63d133a4380df59ff64a623f35f2f669e63061c52
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Extracted

Family
  • stealc

Botnet
  • eu1

C2
  • http://160.20.109.75/d19ca32cb5a444ac8b87.php

Attributes
  • url_path

    /d19ca32cb5a444ac8b87.php

rc4.traffic_key
rc4.plain

Targets

    • Target
      file.exe
    • Size 2.1MB
    • SHA256 8b7537c6624998423c0dc5e63d133a4380df59ff64a623f35f2f669e63061c52
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    • Family: Stealc

      Stealc is an infostealer written in C++.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks