stealc | 1b0967d3ccba09a55da3d2774962a13c5bbfa4c618fdd51bd3b804db7ae9013b | Triage

Sharing

General

Target

1b0967d3ccba09a55da3d2774962a13c5bbfa4c618fdd51bd3b804db7ae9013b.exe
Size

4.5MB
Sample

240819-bktx4swbmb
MD5

a2d030334c0e0775e213c5262b7ad1d9
SHA1

13d7c24318ad6ca87c9f3b319e930ca5425caf0b
SHA256

1b0967d3ccba09a55da3d2774962a13c5bbfa4c618fdd51bd3b804db7ae9013b
SHA512

f330bb2ec51a09c7818fb7fabf0077e9958737d31d2e65762a69b86a984f05c8c4fbcae2165886ae5065a078aa59e8e3811a9e03085efb88cc9668480a295513
SSDEEP

98304:LjNGDPk31RZe6gNbzNYQfQmz0bNYerk9UYzZzIKQv+86UIfYXrP78BNONLc2s2:LjI7kFJgNbJHQdRYeygv+84ywPy

Score

10^/10

stealc cry discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

cry

C2

http://193.176.190.41

Attributes

url_path
/2fa883eebd632382.php

Targets

- Target
  
  1b0967d3ccba09a55da3d2774962a13c5bbfa4c618fdd51bd3b804db7ae9013b.exe
- Size
  
  4.5MB
- MD5
  
  a2d030334c0e0775e213c5262b7ad1d9
- SHA1
  
  13d7c24318ad6ca87c9f3b319e930ca5425caf0b
- SHA256
  
  1b0967d3ccba09a55da3d2774962a13c5bbfa4c618fdd51bd3b804db7ae9013b
- SHA512
  
  f330bb2ec51a09c7818fb7fabf0077e9958737d31d2e65762a69b86a984f05c8c4fbcae2165886ae5065a078aa59e8e3811a9e03085efb88cc9668480a295513
- SSDEEP
  
  98304:LjNGDPk31RZe6gNbzNYQfQmz0bNYerk9UYzZzIKQv+86UIfYXrP78BNONLc2s2:LjI7kFJgNbJHQdRYeygv+84ywPy
Score

10^/10

stealc cry discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealccrydiscoverystealer

behavioral2

stealccrydiscoverystealer