stealc | fce1fb29af966c7264d1832d18240e2de4122646ad511747eadc478be57160e4 | Triage

Sharing

General

Target

2004-15-0x0000000000400000-0x0000000000643000-memory.dmp
Size

2.3MB
Sample

240913-l11qpsxenh
MD5

4368341ad36eee9af7209141640efac2
SHA1

8dc990ea64afbf6a77fb498dfc01dd6cff8e46ab
SHA256

fce1fb29af966c7264d1832d18240e2de4122646ad511747eadc478be57160e4
SHA512

8f021ad82e5902d58f6382e0ee2dff84968af8d058277fb3ba4280a89d4a98f8c2088c4bfe8687b13bf73e852c74e746c35df72eb80023e3ff7417215251da4b
SSDEEP

3072:a1V81NFj5qD6o8KaxfE54HnnGiayl+beX8dgApWFrJKa:a1C1jj5q62aOanGiqbI7FdKa

Score

10^/10

stealc default discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://46.8.231.109

Attributes

url_path
/c4754d4f680ead72.php

Targets

- Target
  
  2004-15-0x0000000000400000-0x0000000000643000-memory.dmp
- Size
  
  2.3MB
- MD5
  
  4368341ad36eee9af7209141640efac2
- SHA1
  
  8dc990ea64afbf6a77fb498dfc01dd6cff8e46ab
- SHA256
  
  fce1fb29af966c7264d1832d18240e2de4122646ad511747eadc478be57160e4
- SHA512
  
  8f021ad82e5902d58f6382e0ee2dff84968af8d058277fb3ba4280a89d4a98f8c2088c4bfe8687b13bf73e852c74e746c35df72eb80023e3ff7417215251da4b
- SSDEEP
  
  3072:a1V81NFj5qD6o8KaxfE54HnnGiayl+beX8dgApWFrJKa:a1C1jj5q62aOanGiqbI7FdKa
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealcdiscoverystealer

behavioral2

stealcdiscoverystealer