stealc | 4ecc5e51334799f7036396454c055f685d93247e16ff469d14b5516f1cbaa009 | Triage

Sharing

General

Target

404-114-0x00000000013D0000-0x0000000001AFE000-memory.dmp
Size

7.2MB
Sample

241104-t3p1zsshnh
MD5

26d5a5a6db9b7cf1c0240e29f4c81624
SHA1

047d042aaa24253743621be4b94e157d7ee2d315
SHA256

4ecc5e51334799f7036396454c055f685d93247e16ff469d14b5516f1cbaa009
SHA512

be8c96483a406c83e60f62f5748ebea79bfb675a131266c7bcb8a18ffa3f9b33f39ed34f51e92a7ab35e8d63a03e0db659e6a01fda06d450acfcf8485683c8c4
SSDEEP

98304:lBGJtF4RIwybpYxXA0Gwvi9jYi6pgRFyWeUywsBFfk:vGh6ybCiqgRUtQsBF

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  404-114-0x00000000013D0000-0x0000000001AFE000-memory.dmp
- Size
  
  7.2MB
- MD5
  
  26d5a5a6db9b7cf1c0240e29f4c81624
- SHA1
  
  047d042aaa24253743621be4b94e157d7ee2d315
- SHA256
  
  4ecc5e51334799f7036396454c055f685d93247e16ff469d14b5516f1cbaa009
- SHA512
  
  be8c96483a406c83e60f62f5748ebea79bfb675a131266c7bcb8a18ffa3f9b33f39ed34f51e92a7ab35e8d63a03e0db659e6a01fda06d450acfcf8485683c8c4
- SSDEEP
  
  98304:lBGJtF4RIwybpYxXA0Gwvi9jYi6pgRFyWeUywsBFfk:vGh6ybCiqgRUtQsBF
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer