stealc | 0b99e57c8f63157d2291deb82e12391f021d8e46821ae742a0d1eaee957bd678 | Triage

Sharing

General

Target

2748-3-0x0000000000FA0000-0x000000000163F000-memory.dmp
Size

6.6MB
Sample

240928-x6xf1svgra
MD5

3ed3781683deb9a813e898839465710e
SHA1

718127593134f62c4bd68160f1ac8e85d3e72c4f
SHA256

0b99e57c8f63157d2291deb82e12391f021d8e46821ae742a0d1eaee957bd678
SHA512

b5d284c214ebe344da7ed4387dd466c7c5910a81c74faa52ca394cef79ede68bd1f3aef0b8193eaba8868559feafe0003bd1ca5928080a6b52932a67e8fc9043
SSDEEP

98304:pv75VOb1OA8Z2agIiSubL70Vji4vB43dUEQ4cbY25+zG:plu37IpAmmeIC

Score

10^/10

stealc save discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

save

C2

http://185.215.113.37

Attributes

url_path
/e2b1563c6670f193.php

Targets

- Target
  
  2748-3-0x0000000000FA0000-0x000000000163F000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  3ed3781683deb9a813e898839465710e
- SHA1
  
  718127593134f62c4bd68160f1ac8e85d3e72c4f
- SHA256
  
  0b99e57c8f63157d2291deb82e12391f021d8e46821ae742a0d1eaee957bd678
- SHA512
  
  b5d284c214ebe344da7ed4387dd466c7c5910a81c74faa52ca394cef79ede68bd1f3aef0b8193eaba8868559feafe0003bd1ca5928080a6b52932a67e8fc9043
- SSDEEP
  
  98304:pv75VOb1OA8Z2agIiSubL70Vji4vB43dUEQ4cbY25+zG:plu37IpAmmeIC
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer