stealc | 0d302c7dd3a391cd59167487090e126211e3999d3a6e3ed002b00399575fff76 | Triage

Sharing

General

Target

2108-5-0x0000000000400000-0x0000000000661000-memory.dmp
Size

2.4MB
Sample

241006-p8fbhsvepn
MD5

3b8838ef909041a4082880cbb0383021
SHA1

e6171ab951d23aaa629edbb85fffd8ccd7049caa
SHA256

0d302c7dd3a391cd59167487090e126211e3999d3a6e3ed002b00399575fff76
SHA512

2f85015c91a850dcc3ce386cb444f587b6ac0cc121ad81d7cebaa0a7833b0bb01622a1219ffeca554000c28e3fd56b74f09889369872328a28edc6672518967f
SSDEEP

3072:wBy+Ni+pxLMtUohuCugHsxMiiI4E2jJxKVhGecfkXgd9mm0DbfAwBw26FC:wDi8xYtUokCulxMfpbK+engHeDb4kwF

Score

10^/10

stealc default discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

default

C2

http://46.8.231.109

Attributes

url_path
/c4754d4f680ead72.php

Targets

- Target
  
  2108-5-0x0000000000400000-0x0000000000661000-memory.dmp
- Size
  
  2.4MB
- MD5
  
  3b8838ef909041a4082880cbb0383021
- SHA1
  
  e6171ab951d23aaa629edbb85fffd8ccd7049caa
- SHA256
  
  0d302c7dd3a391cd59167487090e126211e3999d3a6e3ed002b00399575fff76
- SHA512
  
  2f85015c91a850dcc3ce386cb444f587b6ac0cc121ad81d7cebaa0a7833b0bb01622a1219ffeca554000c28e3fd56b74f09889369872328a28edc6672518967f
- SSDEEP
  
  3072:wBy+Ni+pxLMtUohuCugHsxMiiI4E2jJxKVhGecfkXgd9mm0DbfAwBw26FC:wDi8xYtUokCulxMfpbK+engHeDb4kwF
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer