stealc | ba06fbdbe488cff0ea875427a6dd5f63095c52c09b540c64b3639419830ce1a8 | Triage

Sharing

General

Target

2356-68-0x0000000001270000-0x00000000019B4000-memory.dmp
Size

7.3MB
Sample

241104-ygrpxavpgt
MD5

2984b58f6bf43a77a8cba6d44aaa24a1
SHA1

0f82d28a62776968291aa9d374b20693bcf1ae50
SHA256

ba06fbdbe488cff0ea875427a6dd5f63095c52c09b540c64b3639419830ce1a8
SHA512

a77b50ee0aea33c5747e1d731103edd43739e3b75c439f47dcb95e71a04ac4d2261b534d51c578596570dfd3938cc74b4b8254e655e3e116c8799c1718b4f561
SSDEEP

98304:N8GJtF4RIwybl9wCxLByT+SEOtPcfSeH1VcA4d1PYAPVy:uGh6ybl9O1c6eUjPYmy

Score

10^/10

stealc tale discovery stealer

Malware Config

Extracted

Family

stealc

Botnet

tale

C2

http://185.215.113.206

Attributes

url_path
/6c4adf523b719729.php

Targets

- Target
  
  2356-68-0x0000000001270000-0x00000000019B4000-memory.dmp
- Size
  
  7.3MB
- MD5
  
  2984b58f6bf43a77a8cba6d44aaa24a1
- SHA1
  
  0f82d28a62776968291aa9d374b20693bcf1ae50
- SHA256
  
  ba06fbdbe488cff0ea875427a6dd5f63095c52c09b540c64b3639419830ce1a8
- SHA512
  
  a77b50ee0aea33c5747e1d731103edd43739e3b75c439f47dcb95e71a04ac4d2261b534d51c578596570dfd3938cc74b4b8254e655e3e116c8799c1718b4f561
- SSDEEP
  
  98304:N8GJtF4RIwybl9wCxLByT+SEOtPcfSeH1VcA4d1PYAPVy:uGh6ybl9O1c6eUjPYmy
Score

10^/10

stealc stealer discovery
- Stealc
  Stealc is an infostealer written in C++.
  stealer stealc
- Stealc family
  stealc
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

stealcdiscoverystealer