stealc | 7708192a11d38c68881d4c035498ab297ef36b5f889e3b0d7d87a7504128d824 | Triage

Sharing

General

Target

4780-40-0x0000000000370000-0x0000000000A1B000-memory.dmp
Size

6.7MB
Sample

241023-pjtgva1gmj
MD5

0f761a5d69e4440ca91954456cb086fd
SHA1

d64752c8a340b1a86c747f3b89282e4a2d0d59ef
SHA256

7708192a11d38c68881d4c035498ab297ef36b5f889e3b0d7d87a7504128d824
SHA512

32b0f843f91dd4a4ccd306c542fb61af02228e1561247ebe0dab10d98325accebd231d5c9be43badb13f8ec5c033bee5d966ebf492a0d6015050bad7891e194f
SSDEEP

98304:8P5Syqo6L0/Y6710idhgRC37johsAF9t5YDu8YUw:SXhgRC37jNALQ5YUw

Score

10^/10

stealc doma discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes

url_path
/e2b1563c6670f193.php

Targets

- Target
  
  4780-40-0x0000000000370000-0x0000000000A1B000-memory.dmp
- Size
  
  6.7MB
- MD5
  
  0f761a5d69e4440ca91954456cb086fd
- SHA1
  
  d64752c8a340b1a86c747f3b89282e4a2d0d59ef
- SHA256
  
  7708192a11d38c68881d4c035498ab297ef36b5f889e3b0d7d87a7504128d824
- SHA512
  
  32b0f843f91dd4a4ccd306c542fb61af02228e1561247ebe0dab10d98325accebd231d5c9be43badb13f8ec5c033bee5d966ebf492a0d6015050bad7891e194f
- SSDEEP
  
  98304:8P5Syqo6L0/Y6710idhgRC37johsAF9t5YDu8YUw:SXhgRC37jNALQ5YUw
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer