stealc | e27b55d76a6a7c14417c6bc1c9d51981d394407b8734eafcd56d5f2bc4a8b598 | Triage

Sharing

General

Target

2572-3-0x0000000000B30000-0x00000000011C7000-memory.dmp
Size

6.6MB
Sample

241029-b32qnssekp
MD5

d5e42d39cbb336089b7f787617fc72d2
SHA1

acec3cc676bc4210ca706bb52af1eb174ae815fb
SHA256

e27b55d76a6a7c14417c6bc1c9d51981d394407b8734eafcd56d5f2bc4a8b598
SHA512

c0acc8a7a713b68c3de5ce8ad1e72bd50d2b50921b0f1ab85c8a8c2267c2156b3b281f3427fd51ca0055c7573773ba37bea11251fb0923391f11dc9f3e37f20d
SSDEEP

98304:2BXlDi4T1PL/EFX9jhcPEPJlPSRFxA9M1pwJJD/Oa:UwuWdc8PJtSRFEztma

Score

10^/10

stealc doma discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes

url_path
/e2b1563c6670f193.php

Targets

- Target
  
  2572-3-0x0000000000B30000-0x00000000011C7000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  d5e42d39cbb336089b7f787617fc72d2
- SHA1
  
  acec3cc676bc4210ca706bb52af1eb174ae815fb
- SHA256
  
  e27b55d76a6a7c14417c6bc1c9d51981d394407b8734eafcd56d5f2bc4a8b598
- SHA512
  
  c0acc8a7a713b68c3de5ce8ad1e72bd50d2b50921b0f1ab85c8a8c2267c2156b3b281f3427fd51ca0055c7573773ba37bea11251fb0923391f11dc9f3e37f20d
- SSDEEP
  
  98304:2BXlDi4T1PL/EFX9jhcPEPJlPSRFxA9M1pwJJD/Oa:UwuWdc8PJtSRFEztma
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer