stealc | ec590c8a04a916a90427db1fedbd52565239b26775482ea12f2d094c59980b50 | Triage

Sharing

General

Target

1840-103-0x0000000000140000-0x00000000007DE000-memory.dmp
Size

6.6MB
Sample

241029-cj79sasgqk
MD5

a538382f55a9a3d4bad68bbbfe98f76c
SHA1

1d6ec2bc46d80ffd4a1aea5abdbc88f61ac4df45
SHA256

ec590c8a04a916a90427db1fedbd52565239b26775482ea12f2d094c59980b50
SHA512

29082b65c2dfde1d764f669fb2e77b4a61893dad08460c45c89c071b2105bbf83020d08c7a8224fc4aa70686812ac9a541c3789a336dc9ac2fd197afd3485765
SSDEEP

98304:PH3rIUPcgnK+JFTbyVw79OaHzOqQav6L3Ht:fXvbyVwOaTOqRvkd

Score

10^/10

stealc doma discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

doma

C2

http://185.215.113.37

Attributes

url_path
/e2b1563c6670f193.php

Targets

- Target
  
  1840-103-0x0000000000140000-0x00000000007DE000-memory.dmp
- Size
  
  6.6MB
- MD5
  
  a538382f55a9a3d4bad68bbbfe98f76c
- SHA1
  
  1d6ec2bc46d80ffd4a1aea5abdbc88f61ac4df45
- SHA256
  
  ec590c8a04a916a90427db1fedbd52565239b26775482ea12f2d094c59980b50
- SHA512
  
  29082b65c2dfde1d764f669fb2e77b4a61893dad08460c45c89c071b2105bbf83020d08c7a8224fc4aa70686812ac9a541c3789a336dc9ac2fd197afd3485765
- SSDEEP
  
  98304:PH3rIUPcgnK+JFTbyVw79OaHzOqQav6L3Ht:fXvbyVwOaTOqRvkd
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer