stealc | 89b394ca8aae97280d3328b1c89aea606300c65be0aad1fd4c9d1becc9aaefe0 | Triage

Sharing

General

Target

2648-3-0x00000000003D0000-0x0000000000A6E000-memory.dmp
Size

6.6MB
Sample

241003-cqkr3azblj
MD5

ddb538c05bef6333308fdc5c593d7a43
SHA1

1c3b7488c12f4f05bfa9efb77560b587c9e8c9ee
SHA256

89b394ca8aae97280d3328b1c89aea606300c65be0aad1fd4c9d1becc9aaefe0
SHA512

4b0c409c3beac6167f5afa8235cab840aa7797078ee800ea9ed006378468ae170a3d3e45742c96fb3b0e4377c1d247d3fca998d336017483aad47733b289db33
SSDEEP

98304:oguaGadM1w3Aeg4wbxVbDW3LK1nr4SaVCH/wahojQdRxbEfydN9:ChParmjphFjEfyd

Score

10^/10

stealc doma discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes

url_path
/e2b1563c6670f193.php

Targets

- Target
  
  2648-3-0x00000000003D0000-0x0000000000A6E000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  ddb538c05bef6333308fdc5c593d7a43
- SHA1
  
  1c3b7488c12f4f05bfa9efb77560b587c9e8c9ee
- SHA256
  
  89b394ca8aae97280d3328b1c89aea606300c65be0aad1fd4c9d1becc9aaefe0
- SHA512
  
  4b0c409c3beac6167f5afa8235cab840aa7797078ee800ea9ed006378468ae170a3d3e45742c96fb3b0e4377c1d247d3fca998d336017483aad47733b289db33
- SSDEEP
  
  98304:oguaGadM1w3Aeg4wbxVbDW3LK1nr4SaVCH/wahojQdRxbEfydN9:ChParmjphFjEfyd
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer