stealc | 7efa233cbf81a69024f8c7b13fd06e4624352461349435c9de3304f639f6fa85 | Triage

Sharing

General

Target

1648-106-0x0000000000180000-0x00000000008AF000-memory.dmp
Size

7.2MB
Sample

241102-2m6ykazrgk
MD5

9a3a5627a27dc25d7f41115637ce4f8b
SHA1

30929f91684b5fb811e14140d5e673d2d6a5aaea
SHA256

7efa233cbf81a69024f8c7b13fd06e4624352461349435c9de3304f639f6fa85
SHA512

0edf0b9a39013862536e1b9a76cf38e820bbc0599a6746d36ca3d0550e5db64e86ede4f5f19cb8c34ec1e7acfde1cc8ba60c7d5351cbdb64965fb96da481de91
SSDEEP

98304:nbGJtF4RIwybtHbPcwgx4QD81YFtgGUtRym7VXnnoYpezw5/T/v/4z:bGh6ybo3g8mRXn3pb5/T/v/

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  1648-106-0x0000000000180000-0x00000000008AF000-memory.dmp
- Size
  
  7.2MB
- MD5
  
  9a3a5627a27dc25d7f41115637ce4f8b
- SHA1
  
  30929f91684b5fb811e14140d5e673d2d6a5aaea
- SHA256
  
  7efa233cbf81a69024f8c7b13fd06e4624352461349435c9de3304f639f6fa85
- SHA512
  
  0edf0b9a39013862536e1b9a76cf38e820bbc0599a6746d36ca3d0550e5db64e86ede4f5f19cb8c34ec1e7acfde1cc8ba60c7d5351cbdb64965fb96da481de91
- SSDEEP
  
  98304:nbGJtF4RIwybtHbPcwgx4QD81YFtgGUtRym7VXnnoYpezw5/T/v/4z:bGh6ybo3g8mRXn3pb5/T/v/
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer