stealc | e9e8387e07a0b20cd448abc1fb9654c2188de5e10c074e71030c8dda74e5701c | Triage

Sharing

General

Target

e9e8387e07a0b20cd448abc1fb9654c2188de5e10c074e71030c8dda74e5701c
Size

187KB
Sample

240725-2tbq1azeql
MD5

55720e0a9651454e20ed2d81d42e738f
SHA1

af9e4dafa7c8576405932f6bf926c47ed4ebdb5f
SHA256

e9e8387e07a0b20cd448abc1fb9654c2188de5e10c074e71030c8dda74e5701c
SHA512

3edf7393f8181e3fc410ff25840527fdc47fb4c087410bdf1b7b9544b0b9c914ff6ed8d070a0d52ef27b3b2e48a8f24bbfada04c92a9e9a5a72e5cc7cce4c473
SSDEEP

3072:D1Ve1NFj5qD6o8KaxfE54HnnGiayl+beX8nt4I1FrJKa:D1s1jj5q62aOanGiqbIm1FdKa

Score

10^/10

stealc default discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://85.28.47.31

Attributes

url_path
/5499d72b3a3e55be.php

Targets

- Target
  
  e9e8387e07a0b20cd448abc1fb9654c2188de5e10c074e71030c8dda74e5701c
- Size
  
  187KB
- MD5
  
  55720e0a9651454e20ed2d81d42e738f
- SHA1
  
  af9e4dafa7c8576405932f6bf926c47ed4ebdb5f
- SHA256
  
  e9e8387e07a0b20cd448abc1fb9654c2188de5e10c074e71030c8dda74e5701c
- SHA512
  
  3edf7393f8181e3fc410ff25840527fdc47fb4c087410bdf1b7b9544b0b9c914ff6ed8d070a0d52ef27b3b2e48a8f24bbfada04c92a9e9a5a72e5cc7cce4c473
- SSDEEP
  
  3072:D1Ve1NFj5qD6o8KaxfE54HnnGiayl+beX8nt4I1FrJKa:D1s1jj5q62aOanGiqbIm1FdKa
Score

10^/10

stealc default stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealcdefaultstealer

behavioral2

stealcdefaultdiscoverystealer