stealc | 3b949e360f85236eb66eafa4eeda2ffffb0fb01562767550e75dfb4bf09f0eaf | Triage

Resubmissions

12-08-2024 12:54

240812-p49pka1hqp 10

12-08-2024 11:14

240812-nb7ttssgjb 10

26-06-2024 06:16

240626-g1gwdazbqd 10

Sharing

General

Target

0cdf89055417947a9ad53cf38eb0f75e.exe
Size

158KB
Sample

240812-p49pka1hqp
MD5

0cdf89055417947a9ad53cf38eb0f75e
SHA1

a6d845cd643409201b603f3918c4c45b9afb8111
SHA256

3b949e360f85236eb66eafa4eeda2ffffb0fb01562767550e75dfb4bf09f0eaf
SHA512

8a2523617d4f3c68bd76c9c6f9da358d933b5e71312e25c8ce3a095c3225ba2abea0873ba0c895dea7c374346d3cda5a030557a895b990f1d7a623adb2d2aa20
SSDEEP

3072:hQH5iOMxGNftsLz4oPFKUQgC6OEYkUjUMNW82QZRaop5:hQNMxGNVwtB7OEAoWRa

Score

10^/10

stealc 3 discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

3

C2

http://93.123.39.132

Attributes

url_path
/129edec4272dc2c8.php

Targets

- Target
  
  0cdf89055417947a9ad53cf38eb0f75e.exe
- Size
  
  158KB
- MD5
  
  0cdf89055417947a9ad53cf38eb0f75e
- SHA1
  
  a6d845cd643409201b603f3918c4c45b9afb8111
- SHA256
  
  3b949e360f85236eb66eafa4eeda2ffffb0fb01562767550e75dfb4bf09f0eaf
- SHA512
  
  8a2523617d4f3c68bd76c9c6f9da358d933b5e71312e25c8ce3a095c3225ba2abea0873ba0c895dea7c374346d3cda5a030557a895b990f1d7a623adb2d2aa20
- SSDEEP
  
  3072:hQH5iOMxGNftsLz4oPFKUQgC6OEYkUjUMNW82QZRaop5:hQNMxGNVwtB7OEAoWRa
Score

10^/10

stealc 3 discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealc3discoverystealer