Overview

overview

10

Static

static

5

GTA V.exe

windows10-2004-x64

10

GTA V.exe

windows11-ltsc_2024-x64

10

data/bin/_asyncio.dll

windows10-2004-x64

1

data/bin/_asyncio.dll

windows11-ltsc_2024-x64

1

data/bin/_bz2.dll

windows10-2004-x64

1

data/bin/_bz2.dll

windows11-ltsc_2024-x64

1

data/bin/_ctypes.dll

windows10-2004-x64

1

data/bin/_ctypes.dll

windows11-ltsc_2024-x64

1

data/bin/_decimal.dll

windows10-2004-x64

1

data/bin/_decimal.dll

windows11-ltsc_2024-x64

1

data/bin/_...ee.dll

windows10-2004-x64

1

data/bin/_...ee.dll

windows11-ltsc_2024-x64

1

data/bin/_hashlib.dll

windows10-2004-x64

1

data/bin/_hashlib.dll

windows11-ltsc_2024-x64

1

data/bin/_lzma.dll

windows10-2004-x64

1

data/bin/_lzma.dll

windows11-ltsc_2024-x64

1

data/bin/_...ng.dll

windows10-2004-x64

1

data/bin/_...ng.dll

windows11-ltsc_2024-x64

1

data/bin/_...ed.dll

windows10-2004-x64

1

data/bin/_...ed.dll

windows11-ltsc_2024-x64

1

data/bin/_queue.dll

windows10-2004-x64

1

data/bin/_queue.dll

windows11-ltsc_2024-x64

1

data/bin/_runner.dll

windows10-2004-x64

1

data/bin/_runner.dll

windows11-ltsc_2024-x64

1

data/bin/_sqlite3.dll

windows10-2004-x64

1

data/bin/_sqlite3.dll

windows11-ltsc_2024-x64

1

data/bin/_ssl.dll

windows10-2004-x64

1

data/bin/_ssl.dll

windows11-ltsc_2024-x64

1

data/bin/_uuid.dll

windows10-2004-x64

1

data/bin/_uuid.dll

windows11-ltsc_2024-x64

1

data/bin/_wmi.dll

windows10-2004-x64

1

data/bin/_wmi.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    build_2026-11-13.zip
  • Size 11.1MB
  • Sample261114-mxtnnafy41
  • SHA256 d51ccc272a34958a0ec7f41ca5bfd615f73c3024f9d2c956455c3aae69417f2c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
stealcgitgathapadwarediscoveryspywarestealer

Malware Config

Extracted

Family

  • stealc

Botnet

  • GitGatHap

C2

  • http://37.59.205.8

rc4.traffic_key
rc4.plain

Targets

    • Target
      GTA V.exe
    • Size 246KB
    • SHA256 3f0c1313bac92a2e20966ff0819ad0d59da93dea23e6d946713bd82367db066c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    adwaregitgathapdiscoverystealcspywarestealer

    • Detects Stealc stealer Version 3

    • Family: Stealc

      Stealc is an infostealer written in C++.

      stealerstealc

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1behavioral2
    • Target
      data/bin/_asyncio.pyd
    • Size 71KB
    • SHA256 675587b1155c875ab27e24302d53f38e41febd3c080bc190c3e4ffbdb51fe76b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      data/bin/_bz2.pyd
    • Size 84KB
    • SHA256 b3dd7cea6d03342252834cebcc814af37d850b86d0627fa22b7f6990882f2f8b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      data/bin/_ctypes.pyd
    • Size 130KB
    • SHA256 dfa65498c77e71f038883337d2b5ffd92508489e79e6ee5e96ddec4ecf2a7fa1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      data/bin/_decimal.pyd
    • Size 276KB
    • SHA256 f55d81378a3261a7073fb71aee674152265b6f24ba6f375f9b939d5a117d8e6b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      data/bin/_elementtree.pyd
    • Size 133KB
    • SHA256 58339737dd818a6d0bac98403158677f2f7d54adc7c673b9a8a18c8b19ab11f6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      data/bin/_hashlib.pyd
    • Size 67KB
    • SHA256 1a3010b06c2fcd625dece3dd0883ca060e98b94adc062b06cb1a671cfc3b5caf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13behavioral14
    • Target
      data/bin/_lzma.pyd
    • Size 155KB
    • SHA256 f20be6a9fee8fb5d53170c4bc24a39b48d3c0ccbe8e2000e60ff7d65b77c6ea1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral15behavioral16
    • Target
      data/bin/_multiprocessing.pyd
    • Size 37KB
    • SHA256 6c4ca996eafc99aeb246d25b5a9499d01488b643dcdabee6b48137f179b3deef
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral17behavioral18
    • Target
      data/bin/_overlapped.pyd
    • Size 56KB
    • SHA256 626675dc9fc5c74beb72cd278322a8313b68b22161e34473f8b951c238e72185
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral19behavioral20
    • Target
      data/bin/_queue.pyd
    • Size 34KB
    • SHA256 1e349a13913370369059a4ae5951157112b5eba53ed4389c18ffc5e00af1a037
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral21behavioral22
    • Target
      data/bin/_runner.pyd
    • Size 31KB
    • SHA256 dad9ca5a71864aefa77e69144ad0e438de699fccecaeadc918d90f7e50b5068b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral23behavioral24
    • Target
      data/bin/_sqlite3.pyd
    • Size 126KB
    • SHA256 1f79bc24e1736dcbe487e711ae04b19fbd19498818be46010d862912d83df1c2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral25behavioral26
    • Target
      data/bin/_ssl.pyd
    • Size 177KB
    • SHA256 faf716d309349dbd54efd7fb402bd42ed21a537614ac0da89ed92ba307ecbf15
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral27behavioral28
    • Target
      data/bin/_uuid.pyd
    • Size 27KB
    • SHA256 6748c182df6181cff8691da72dbb81f4f7f446ac7482d5dfe671f2b5333aed5d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral29behavioral30
    • Target
      data/bin/_wmi.pyd
    • Size 38KB
    • SHA256 3be5e14e9a9dc49f099209dee98b9cb5e31ade3b0deab52277026bb14df5bdb6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral31behavioral32

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
5/10

behavioral1

adwaregitgathapdiscoverystealcspywarestealer
Score
10/10

behavioral2

adwaregitgathapdiscoverystealcspywarestealer
Score
10/10

behavioral3

Score
1/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

Score
1/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

Score
1/10

behavioral23

Score
1/10

behavioral24

Score
1/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

Score
1/10

behavioral31

Score
1/10

behavioral32

Score
1/10