stealc | 14ddd2f6231c576c37c81873b7fd0684e0acdc578938e90b9a0ac9cec467a32c | Triage

Sharing

General

Target

14ddd2f6231c576c37c81873b7fd0684e0acdc578938e90b9a0ac9cec467a32c
Size

239KB
Sample

240904-pwwsqszepq
MD5

4ebeaa04b472b6108bfaed2a00d5caf5
SHA1

62f84d89d36840d21fa23eccf352269f59861b65
SHA256

14ddd2f6231c576c37c81873b7fd0684e0acdc578938e90b9a0ac9cec467a32c
SHA512

eda5b897c38926e61090d141829cdbf57680c137d13b875ac7d3a0452105a346233ba519e7143f632e2c447be0d1c7f1f6352269212f1c3cdbbb0924af032ddf
SSDEEP

3072:ZUZBEErSfQAqB8J8DeWwq3PtAuni7IdL5nYyK7SvLROE/smCJZgFb1:ZqBEErSfQAqB8J6f3FHLJxemCJZu

Score

10^/10

stealc default100 discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

default100

C2

http://62.204.41.151

Attributes

url_path
/edd20096ecef326d.php

Targets

- Target
  
  14ddd2f6231c576c37c81873b7fd0684e0acdc578938e90b9a0ac9cec467a32c
- Size
  
  239KB
- MD5
  
  4ebeaa04b472b6108bfaed2a00d5caf5
- SHA1
  
  62f84d89d36840d21fa23eccf352269f59861b65
- SHA256
  
  14ddd2f6231c576c37c81873b7fd0684e0acdc578938e90b9a0ac9cec467a32c
- SHA512
  
  eda5b897c38926e61090d141829cdbf57680c137d13b875ac7d3a0452105a346233ba519e7143f632e2c447be0d1c7f1f6352269212f1c3cdbbb0924af032ddf
- SSDEEP
  
  3072:ZUZBEErSfQAqB8J8DeWwq3PtAuni7IdL5nYyK7SvLROE/smCJZgFb1:ZqBEErSfQAqB8J6f3FHLJxemCJZu
Score

10^/10

stealc default100 discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealcdefault100discoverystealer

behavioral2

stealcdefault100discoverystealer