stealc | 540bd29a0195228e21d6a22e8e79b0d451d26454a23b6b1fc2f713c730b69997 | Triage

Sharing

General

Target

1528-157-0x0000000000A30000-0x00000000010E2000-memory.dmp
Size

6.7MB
Sample

241029-blejtazjgs
MD5

eb2c709a9345d924b7bc1f22e17d4953
SHA1

3a9bff7ff958c1ab8a04c96bb258c121ae9f371d
SHA256

540bd29a0195228e21d6a22e8e79b0d451d26454a23b6b1fc2f713c730b69997
SHA512

dda7249ca05d396783d0af0e79aab19ee1a234ca88222008705e035cb7b29b2983a675bb69adc6a6a2408907addab19893f5e1e3f13928f682f62461e9ccdbec
SSDEEP

98304:9ZGazUZZ2BFnJFEl6ofKckAE7sUIr90z:ueVJF+pXsyZm

Score

10^/10

stealc doma discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes

url_path
/e2b1563c6670f193.php

Targets

- Target
  
  1528-157-0x0000000000A30000-0x00000000010E2000-memory.dmp
- Size
  
  6.7MB
- MD5
  
  eb2c709a9345d924b7bc1f22e17d4953
- SHA1
  
  3a9bff7ff958c1ab8a04c96bb258c121ae9f371d
- SHA256
  
  540bd29a0195228e21d6a22e8e79b0d451d26454a23b6b1fc2f713c730b69997
- SHA512
  
  dda7249ca05d396783d0af0e79aab19ee1a234ca88222008705e035cb7b29b2983a675bb69adc6a6a2408907addab19893f5e1e3f13928f682f62461e9ccdbec
- SSDEEP
  
  98304:9ZGazUZZ2BFnJFEl6ofKckAE7sUIr90z:ueVJF+pXsyZm
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer