stealc | 2c4c1ce5fa26aaf93a4080e63128c7962ce930fa03ccedc903dbe22fb108ffc7 | Triage

Sharing

General

Target

436-77-0x00000000013A0000-0x0000000001A43000-memory.dmp
Size

6.6MB
Sample

241029-ab3yzsyjg1
MD5

ea70772a017d6be71ec13bfa1229571b
SHA1

bff43e63abf0080afb3300170e60feb573928214
SHA256

2c4c1ce5fa26aaf93a4080e63128c7962ce930fa03ccedc903dbe22fb108ffc7
SHA512

904ac4805866603e6e5336f7c7a7a3116c65984f0cec05cf8e903f135169ac940193dfb08ecb824d158de23c713342411ed9d637ada03e71ba545da86a166c77
SSDEEP

98304:AqFKRT0OqQ8m4SrSOKhHFJTPTD46Nb4EvO2eUZ1T:HurSbHFN46Nb4Ev3eUZ

Score

10^/10

stealc doma discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes

url_path
/e2b1563c6670f193.php

Targets

- Target
  
  436-77-0x00000000013A0000-0x0000000001A43000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  ea70772a017d6be71ec13bfa1229571b
- SHA1
  
  bff43e63abf0080afb3300170e60feb573928214
- SHA256
  
  2c4c1ce5fa26aaf93a4080e63128c7962ce930fa03ccedc903dbe22fb108ffc7
- SHA512
  
  904ac4805866603e6e5336f7c7a7a3116c65984f0cec05cf8e903f135169ac940193dfb08ecb824d158de23c713342411ed9d637ada03e71ba545da86a166c77
- SSDEEP
  
  98304:AqFKRT0OqQ8m4SrSOKhHFJTPTD46Nb4EvO2eUZ1T:HurSbHFN46Nb4Ev3eUZ
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer