stealc | 3d7c3cb1e497d0dff0ea61645e1332ed9987e31faac74a438e42ee01e1dc2017 | Triage

Sharing

General

Target

3816-38-0x0000000000EA0000-0x0000000001547000-memory.dmp
Size

6.7MB
Sample

241023-k65q6s1hnb
MD5

31a93dc47fb39211c50d25df0ff8abac
SHA1

a421ebe5d5d2e16ea4a89862d1255f2b0430717d
SHA256

3d7c3cb1e497d0dff0ea61645e1332ed9987e31faac74a438e42ee01e1dc2017
SHA512

2ba47e89a71a82140b94b4dde8bc815ee9cadf41115dec678f732d304db5c01af7cc72788b3d1d11de5fb105bd2f85016407b4e2f15cf7f430c4ad3f4076823b
SSDEEP

98304:0KsSu7S37RFp9heW9yb78RpIzoYfhSUzUQR8EgahRNgSHWj2XOp:y7s9I7CpmuyF8EiSuk

Score

10^/10

stealc doma discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes

url_path
/e2b1563c6670f193.php

Targets

- Target
  
  3816-38-0x0000000000EA0000-0x0000000001547000-memory.dmp
- Size
  
  6.7MB
- MD5
  
  31a93dc47fb39211c50d25df0ff8abac
- SHA1
  
  a421ebe5d5d2e16ea4a89862d1255f2b0430717d
- SHA256
  
  3d7c3cb1e497d0dff0ea61645e1332ed9987e31faac74a438e42ee01e1dc2017
- SHA512
  
  2ba47e89a71a82140b94b4dde8bc815ee9cadf41115dec678f732d304db5c01af7cc72788b3d1d11de5fb105bd2f85016407b4e2f15cf7f430c4ad3f4076823b
- SSDEEP
  
  98304:0KsSu7S37RFp9heW9yb78RpIzoYfhSUzUQR8EgahRNgSHWj2XOp:y7s9I7CpmuyF8EiSuk
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer