stealc | 050fb37cf518be26c451c3acb4f58cf7ee174871b80ae4fcd95644f3cc5c2003 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

050fb37cf518be26c451c3acb4f58cf7ee174871b80ae4fcd95644f3cc5c2003.exe
Size

247KB
Sample

240803-bdff5ssbkg
MD5

80cfdbd11614596b637b1954f7fc6f4b
SHA1

028ef61a5f38919fc54bc5fb7a214e4618e4cf88
SHA256

050fb37cf518be26c451c3acb4f58cf7ee174871b80ae4fcd95644f3cc5c2003
SHA512

490287fca6d86dff71a6eeab583e127e87800a211aad8c45feb88b86b82d5e6e6a259cba4de0853cc361c983bab1160488bdf97246d2a7712a9d72a3d2f4f4df
SSDEEP

3072:QUL4690b4Mn4CbwLJxqryGJhTFQEaFM4IwQFQYkVkgu1h5tu6Atz:XL46mb4M4UwLq9JxFQEa/57Rt6I

Score

10^/10

stealc default discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://185.215.113.24

Attributes

url_path
/e2b1563c6670f193.php

Targets

- Target
  
  050fb37cf518be26c451c3acb4f58cf7ee174871b80ae4fcd95644f3cc5c2003.exe
- Size
  
  247KB
- MD5
  
  80cfdbd11614596b637b1954f7fc6f4b
- SHA1
  
  028ef61a5f38919fc54bc5fb7a214e4618e4cf88
- SHA256
  
  050fb37cf518be26c451c3acb4f58cf7ee174871b80ae4fcd95644f3cc5c2003
- SHA512
  
  490287fca6d86dff71a6eeab583e127e87800a211aad8c45feb88b86b82d5e6e6a259cba4de0853cc361c983bab1160488bdf97246d2a7712a9d72a3d2f4f4df
- SSDEEP
  
  3072:QUL4690b4Mn4CbwLJxqryGJhTFQEaFM4IwQFQYkVkgu1h5tu6Atz:XL46mb4M4UwLq9JxFQEa/57Rt6I
Score

10^/10

stealc default discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealcdefaultdiscoverystealer

behavioral2

stealcdefaultdiscoverystealer