Overview

overview

10

Static

static

5

12b0e803c8...df.exe

windows10-2004-x64

10

12b0e803c8...df.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    12b0e803c821a4c2b1b0e826ccb821f6bbcb421615a63ba5ce9e4c2a648c98df
  • Size 1.1MB
  • Sample260826-syn3fsyydx
  • SHA256 12b0e803c821a4c2b1b0e826ccb821f6bbcb421615a63ba5ce9e4c2a648c98df
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
stealcdiscoverystealer

Malware Config

Extracted

Family

  • stealc

C2

  • http://91.92.241.119

rc4.plain

Targets

    • Target
      12b0e803c821a4c2b1b0e826ccb821f6bbcb421615a63ba5ce9e4c2a648c98df
    • Size 1.1MB
    • SHA256 12b0e803c821a4c2b1b0e826ccb821f6bbcb421615a63ba5ce9e4c2a648c98df
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverystealcstealer

    • Detects Stealc stealer Version 3

    • Family: Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks