stealc | 034e3e50545483bd158567a5e241d0c067652aa3596cc73ea0ce237d7678074d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3468-1-0x0000000000400000-0x0000000000643000-memory.dmp
Size

2.3MB
Sample

240919-p763vazbje
MD5

b9209188c3cb42c663d9fa78fddb513e
SHA1

1fa32ba220cc441a6fdda01a5efac36657514738
SHA256

034e3e50545483bd158567a5e241d0c067652aa3596cc73ea0ce237d7678074d
SHA512

8fecf4768d215f6fe335cc36232bf8fc3d8580183ec0bc1a84b04023b00c6c35c411ec3cfcba9b3da5f69f8a8dea752c0094657c30443c639733671829b45f0b
SSDEEP

3072:vk9X0KFj5qj6o8KaxfE54HnnGqaKl+b2n8OU3j+tT9+owFmpKa:vkx/j5K62aOanGqCbAG3iD+9FAKa

Score

10^/10

stealc default discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://154.216.18.13

Attributes

url_path
/1a6bc231b835769a.php

Targets

- Target
  
  3468-1-0x0000000000400000-0x0000000000643000-memory.dmp
- Size
  
  2.3MB
- MD5
  
  b9209188c3cb42c663d9fa78fddb513e
- SHA1
  
  1fa32ba220cc441a6fdda01a5efac36657514738
- SHA256
  
  034e3e50545483bd158567a5e241d0c067652aa3596cc73ea0ce237d7678074d
- SHA512
  
  8fecf4768d215f6fe335cc36232bf8fc3d8580183ec0bc1a84b04023b00c6c35c411ec3cfcba9b3da5f69f8a8dea752c0094657c30443c639733671829b45f0b
- SSDEEP
  
  3072:vk9X0KFj5qj6o8KaxfE54HnnGqaKl+b2n8OU3j+tT9+owFmpKa:vkx/j5K62aOanGqCbAG3iD+9FAKa
Score

10^/10

stealc discovery stealer
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

stealcdiscoverystealer

behavioral2

stealcdiscoverystealer