stealc | 5c2848f029b4fad22b8006b0f153d4f0ff8d505cd6d4ba856b9417814118c9c5 | Triage

Sharing

General

Target

1596-1206-0x0000000000CA0000-0x00000000013C0000-memory.dmp
Size

7.1MB
Sample

241104-28yt3szepn
MD5

29d4d515e5255084595812a235827080
SHA1

736ad6df9f1b4cf90c92d72227ea94b291ca7cf6
SHA256

5c2848f029b4fad22b8006b0f153d4f0ff8d505cd6d4ba856b9417814118c9c5
SHA512

d11e5d84d390dfab4689c2f6e7b91a67856a8d171d2a062883cf0509df1d65047c97c4fc92f8e182955c79a7cea77b3c00ccf0a862ff4a34d3ed42e3b0516a1c
SSDEEP

98304:xWGJtF4RIwybePh2HDaDZrpM4g9XsCVF2r/6ieQn:EGh6ybUq4osyc3n

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  1596-1206-0x0000000000CA0000-0x00000000013C0000-memory.dmp
- Size
  
  7.1MB
- MD5
  
  29d4d515e5255084595812a235827080
- SHA1
  
  736ad6df9f1b4cf90c92d72227ea94b291ca7cf6
- SHA256
  
  5c2848f029b4fad22b8006b0f153d4f0ff8d505cd6d4ba856b9417814118c9c5
- SHA512
  
  d11e5d84d390dfab4689c2f6e7b91a67856a8d171d2a062883cf0509df1d65047c97c4fc92f8e182955c79a7cea77b3c00ccf0a862ff4a34d3ed42e3b0516a1c
- SSDEEP
  
  98304:xWGJtF4RIwybePh2HDaDZrpM4g9XsCVF2r/6ieQn:EGh6ybUq4osyc3n
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer