stealc | 3b14e6d641377d52b714e3fe08d88eee35ef07163aa0bf6a4828be0fdd801d6b | Triage

Sharing

General

Target

2848-71-0x0000000000CE0000-0x00000000013FD000-memory.dmp
Size

7.1MB
Sample

241104-h1l1rsxdnk
MD5

03b7e57818eb548258e570f1ac9726e2
SHA1

4fabe255a2d2e5d082d41ed60bba77feb81165b4
SHA256

3b14e6d641377d52b714e3fe08d88eee35ef07163aa0bf6a4828be0fdd801d6b
SHA512

0d8e396a29456992e867edcb47a5b9eb84d9df8f56594d4b7384a473c211a07ceb0e549ac405d2004e1797ee10425349f5cf953dd810fdf8280b967c83028628
SSDEEP

98304:UQGJtF4RIwybpV31zf18YtjqMWD/nz7Ma1n0aGQH9jmVbOsO7jm:RGh6ybPFteMYnvMA0aBHSOP

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  2848-71-0x0000000000CE0000-0x00000000013FD000-memory.dmp
- Size
  
  7.1MB
- MD5
  
  03b7e57818eb548258e570f1ac9726e2
- SHA1
  
  4fabe255a2d2e5d082d41ed60bba77feb81165b4
- SHA256
  
  3b14e6d641377d52b714e3fe08d88eee35ef07163aa0bf6a4828be0fdd801d6b
- SHA512
  
  0d8e396a29456992e867edcb47a5b9eb84d9df8f56594d4b7384a473c211a07ceb0e549ac405d2004e1797ee10425349f5cf953dd810fdf8280b967c83028628
- SSDEEP
  
  98304:UQGJtF4RIwybpV31zf18YtjqMWD/nz7Ma1n0aGQH9jmVbOsO7jm:RGh6ybPFteMYnvMA0aBHSOP
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer