stealc | 5d2ca8e3263fddc8085dce92d701069d554293ce51ce40f8e9655cfbcb417fb0 | Triage

Sharing

General

Target

2680-16-0x0000000000400000-0x0000000000643000-memory.dmp
Size

2.3MB
Sample

240919-e9kyaa1enh
MD5

f9336c894118f644e210ea76c394f9cf
SHA1

20689003ce00443fb0c0bf57eb84f69c9ba717bb
SHA256

5d2ca8e3263fddc8085dce92d701069d554293ce51ce40f8e9655cfbcb417fb0
SHA512

160bf1657b82c5de02e3caafe20ba014a9ac1ee6450da74b85da0c7127823170028cd0684fd05d673ca1866783246f6abdea87f754c04e0b3fe1c7c9dd14d86b
SSDEEP

3072:a1V81NFj5qD6o8KaxfE54HnnGiayl+beX88gApWFrJKa:a1C1jj5q62aOanGiqbIoFdKa

Score

10^/10

stealc default discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://46.8.231.109

Attributes

url_path
/c4754d4f680ead72.php

Targets

- Target
  
  2680-16-0x0000000000400000-0x0000000000643000-memory.dmp
- Size
  
  2.3MB
- MD5
  
  f9336c894118f644e210ea76c394f9cf
- SHA1
  
  20689003ce00443fb0c0bf57eb84f69c9ba717bb
- SHA256
  
  5d2ca8e3263fddc8085dce92d701069d554293ce51ce40f8e9655cfbcb417fb0
- SHA512
  
  160bf1657b82c5de02e3caafe20ba014a9ac1ee6450da74b85da0c7127823170028cd0684fd05d673ca1866783246f6abdea87f754c04e0b3fe1c7c9dd14d86b
- SSDEEP
  
  3072:a1V81NFj5qD6o8KaxfE54HnnGiayl+beX88gApWFrJKa:a1C1jj5q62aOanGiqbIoFdKa
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealcdiscoverystealer

behavioral2

stealcdiscoverystealer