General

  • Target
    1.7z
  • Size 480KB
  • Sample260712-nzmtkaa17s
  • SHA256 91746c51657cf32dbe6ef4c804b10d1e39c36753f56db6e51beb94fccbc7ec58
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    http://178.16.55.153

Targets

    • Target
      Lust Odyssey Eternal Desires.exe
    • Size 1.2MB
    • SHA256 f36eceaf3bb4875aa06ecbb1aaacfc24d597bf784e48b6893763ddf79fe43273
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: stealc_stealer

    • Detects StealC in memory using payload markers, WinINet APIs and protocol strings

      StealC Stealer.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks